Split the CI/CD Variable Hidden option from the Masked option.
Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.
Proposal
As currently implemented, CI/CD variable contents must pass the validation for the Masked option since the only options are currently Masked or Masked and Hidden. Nothing about the Hidden option restrictions rely on the functionality of the Masked option. These two options should be split, and the Hidden option should not be restricted to Masked validations.
A real world use case for this is SSH Keys. SSH Keys never pass Masked validation, but we would like to have them Hidden. Much like Masked care needs to be taken with proper pipeline modification and scope protections set up by the user for the Hidden option to protect the data from malicious exposure, but having the option to hide the values doesn't increase the exposure surface in any way.