We identified a couple of issues with environment variable masking in decK commands:
- When an environment variable value is updated, the previous value is leaked in the output instead of being masked .
- If a secret contains a value (for example, "x"), every occurrence of that value in the output gets masked, even when it is unrelated to the actual secret.
We identified a couple of issues with environment variable masking in decK commands: