7

When running on a Github action runner the Maven log output shows only 3 asterisk (***) instead of the actual string

Warning: /home/runner/work/project/src/test/java/de/***/persistence/dao/DaoTest.java:98: Prefer java.time.ZonedDateTime

Where do these *** come from?

brass monkey
  • 5,841
  • 10
  • 36
  • 61

1 Answers1

8

Turned out that Github actions have a security feature that replaces strings that are also used as a secret. So if some log output just by accident contains the same string as used as a secret elsewhere it does get replaced with ***.

This is also mentioned in this issue.

brass monkey
  • 5,841
  • 10
  • 36
  • 61
  • What would we do when the intended string is necessary on a command, and don't want GitHub to substitute the string. In my case I have a secret for my username, but then I hard code my username when trying to build a Docker image which requires me to specify my username. – yaach Oct 04 '22 at 14:07
  • This is funny, I have a json secret, and it replaces curly brace in the output ¯\_(ツ)_/¯ – Danylo Fedorov Mar 01 '23 at 16:04