Security / Public reference

Pipeline prints a secret

A GitLab CI, Azure Pipelines, or Cloud Build script line that echoes or prints a secret-like variable.

What you need to supply

The pipeline text. The pipeline is not executed.

If it reports a finding

High severity. The suggested next step is to remove the printed secret from the script.

What this does not prove

A script that only echoes hello is not this finding. A secret named only in a comment is not this finding.

Script line that this check is written to notice

echo $CI_JOB_TOKEN

All review checks. Reading this page does not submit your infrastructure.