Fix: Disable the bash echo with -x

::add-mask:: disables the output however the GHA steps through the echo in the run. Therefore avoid sensitive data being echo-ed in the logs being disabled add +x as the last arg to bash. Signed-off-by: Anil Belur <[email protected]>
lfit · Dec 5, 2023 · a901b79 · a901b79
1 parent 0a605ea
commit a901b79
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/compose-packer-verify.yaml b/.github/workflows/compose-packer-verify.yaml
@@ -111,7 +111,7 @@ jobs:
       - name: Create cloud-env file required for packer
         id: create-cloud-env-file
         if: steps.changes.outputs.src == 'true'
-        shell: bash
+        shell: /usr/bin/bash --noprofile --norc -e -o pipefail +x {0}
         # yamllint disable rule:line-length
         run: |
           echo "${{ env.CLOUDS_ENV_B64 }}" | sed 's/^ */::add-mask::/'
@@ -121,7 +121,7 @@ jobs:
       - name: Create cloud.yaml file for openstack client
         id: create-cloud-yaml-file
         if: steps.changes.outputs.src == 'true'
-        shell: bash
+        shell: /usr/bin/bash --noprofile --norc -e -o pipefail +x {0}
         # yamllint disable rule:line-length
         run: |
           mkdir -p "$HOME/.config/openstack"