DOCKER_AUTH_CONFIG should be [MASKED]

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

  • Close this issue

Problem to solve

The jobout currently prints the DOCKER_AUTH_CONFIG in cleartext.

Intended users

All user, that can see the output of a pipeline job.

Further details

Secrets should be kept secret.

Proposal

Mask the DOCKER_AUTH_CONFIG like CI_JOB_TOKEN=[MASKED] or CI_REGISTRY_PASSWORD=[MASKED].

Permissions and Security

Permission to see CI pipelines.

Documentation

...

Testing

...

What does success look like, and how can we measure that?

Joboutput should mask the DOCKER_AUTH_CONFIG environment variable.

DOCKER_AUTH_CONFIG=[MASKED]

What is the type of buyer?

...

Links / references

Edited Aug 28, 2025 by 🤖 GitLab Bot 🤖
Assignee Loading
Time tracking Loading