From 5019d25a940813119d31f16276331d050bf643f8 Mon Sep 17 00:00:00 2001 From: Buffden Date: Sat, 4 Apr 2026 15:47:32 -0500 Subject: [PATCH] yml masking --- .github/workflows/ci-workflows.yml | 4 ++++ .github/workflows/deploy.yml | 8 ++++++-- 2 files changed, 10 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci-workflows.yml b/.github/workflows/ci-workflows.yml index de53f7e..9ebb1f0 100644 --- a/.github/workflows/ci-workflows.yml +++ b/.github/workflows/ci-workflows.yml @@ -51,6 +51,8 @@ jobs: run: | PG_PASS=$(openssl rand -hex 16) APP_PASS=$(openssl rand -hex 16) + echo "::add-mask::$PG_PASS" + echo "::add-mask::$APP_PASS" echo "POSTGRES_USER=tinyurl_ci" >> $GITHUB_ENV echo "POSTGRES_PASSWORD<> $GITHUB_ENV echo "$PG_PASS" >> $GITHUB_ENV @@ -80,6 +82,8 @@ jobs: run: | PG_PASS=$(openssl rand -hex 16) APP_PASS=$(openssl rand -hex 16) + echo "::add-mask::$PG_PASS" + echo "::add-mask::$APP_PASS" echo "POSTGRES_USER=tinyurl_ci" >> $GITHUB_ENV echo "POSTGRES_PASSWORD<> $GITHUB_ENV echo "$PG_PASS" >> $GITHUB_ENV diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 2a04a02..a6c7edb 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -50,6 +50,8 @@ jobs: run: | PG_PASS=$(openssl rand -hex 16) APP_PASS=$(openssl rand -hex 16) + echo "::add-mask::$PG_PASS" + echo "::add-mask::$APP_PASS" echo "POSTGRES_USER=tinyurl_ci" >> $GITHUB_ENV echo "POSTGRES_PASSWORD<> $GITHUB_ENV echo "$PG_PASS" >> $GITHUB_ENV @@ -105,11 +107,13 @@ jobs: EC2_INSTANCE_ID=$(aws ssm get-parameter \ --name "/tinyurl/cicd/ec2-instance-id" \ --with-decryption \ - --query "Parameter.Value" --output text) + --query "Parameter.Value" --output text 2>/dev/null) \ + || { echo "Failed to fetch instance ID from SSM"; exit 1; } RDS_ENDPOINT=$(aws ssm get-parameter \ --name "/tinyurl/cicd/rds-endpoint" \ --with-decryption \ - --query "Parameter.Value" --output text) + --query "Parameter.Value" --output text 2>/dev/null) \ + || { echo "Failed to fetch RDS endpoint from SSM"; exit 1; } echo "::add-mask::$EC2_INSTANCE_ID" echo "::add-mask::$RDS_ENDPOINT" echo "EC2_INSTANCE_ID=$EC2_INSTANCE_ID" >> $GITHUB_ENV