# Pipeline prints a secret

A GitLab CI, Azure Pipelines, or Cloud Build script line that echoes or prints a secret-like variable.

Area: Security

## What you need to supply

The pipeline text. The pipeline is not executed.

## If it reports a finding

High severity. The suggested next step is to remove the printed secret from the script.

## What this does not prove

A script that only echoes hello is not this finding. A secret named only in a comment is not this finding.

## Script line that this check is written to notice

```
echo $CI_JOB_TOKEN
```

Reading this page does not submit infrastructure. The HTML page is https://skaleagents.com/checks/pipeline-prints-a-secret.