This is an automated email from the ASF dual-hosted git repository.

sbp pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tooling-actions.git


The following commit(s) were added to refs/heads/main by this push:
     new a93863e  Fix email masking
a93863e is described below

commit a93863e9651344d139c0b35cfa2652a49fcc1203
Author: Sean B. Palmer <[email protected]>
AuthorDate: Fri Sep 5 14:35:29 2025 +0100

    Fix email masking
---
 release-on-atr/action.yml | 10 ++++++++--
 upload-to-atr/action.yml  |  2 +-
 2 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/release-on-atr/action.yml b/release-on-atr/action.yml
index d6481b4..6dd1e75 100644
--- a/release-on-atr/action.yml
+++ b/release-on-atr/action.yml
@@ -42,7 +42,7 @@ runs:
       id: create-github-jwt
       shell: bash
       run: |
-        set -euxo pipefail
+        set -euo pipefail
         url="${ACTIONS_ID_TOKEN_REQUEST_URL}&audience=${INPUTS_AUDIENCE}"
         jwt="$(curl -sS --fail-with-body -H "Authorization: bearer 
${ACTIONS_ID_TOKEN_REQUEST_TOKEN}" "$url" | jq -r .value)"
         echo "::add-mask::$jwt"
@@ -72,6 +72,13 @@ runs:
         INPUTS_RESOLVE_RESOLUTION: ${{ inputs.resolve-resolution }}
         JWT: ${{ steps.create-github-jwt.outputs.jwt }}
 
+    - name: Mask announce email
+      if: ${{ inputs.announce == 'true' }}
+      shell: bash
+      run: echo "::add-mask::$INPUTS_ANNOUNCE_EMAIL_TO"
+      env:
+        INPUTS_ANNOUNCE_EMAIL_TO: ${{ inputs.announce-email-to }}
+
     - name: Announce release (optional)
       if: ${{ inputs.announce == 'true' }}
       shell: bash
@@ -86,7 +93,6 @@ runs:
         : "${INPUTS_ANNOUNCE_SUBJECT:?announce-subject is required when 
announce == true}"
         : "${INPUTS_ANNOUNCE_BODY:?announce-body is required when announce == 
true}"
         : "${INPUTS_ANNOUNCE_PATH_SUFFIX:?announce-path-suffix is required 
when announce == true}"
-        echo "::add-mask::$INPUTS_ANNOUNCE_EMAIL_TO"
         jq -n --arg jwt "$JWT" \
               --arg version "$INPUTS_VERSION" \
               --arg revision "$INPUTS_ANNOUNCE_REVISION" \
diff --git a/upload-to-atr/action.yml b/upload-to-atr/action.yml
index 7a3b921..6813fbd 100644
--- a/upload-to-atr/action.yml
+++ b/upload-to-atr/action.yml
@@ -36,7 +36,7 @@ runs:
       id: create-github-jwt
       shell: bash
       run: |
-        set -euxo pipefail
+        set -euo pipefail
         url="${ACTIONS_ID_TOKEN_REQUEST_URL}&audience=${INPUTS_AUDIENCE}"
         jwt="$(curl -sS -H "Authorization: bearer 
${ACTIONS_ID_TOKEN_REQUEST_TOKEN}" "$url" \
              | python3 -c 'import json, sys; 
print(json.load(sys.stdin)["value"])')"


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to