Is there a way to hide variables from being output in Tasks?

[aclarknexient]

I created a simple mise task to test it out:

[tasks.tfcmods]
description = "Show the latest versions of TFC modules"
run = """
curl -s --header "Authorization: Bearer {{env.TFC_GROUP_TOKEN_DEV}}" \
  "https://app.terraform.io/api/v2/organizations/REDACTED/registry-modules?page%5Bnumber%5D=1&page%5Bsize%5D=100" \
  | jq -r '.data[].attributes | {name, "version" : ."version-statuses"[0].version} | join(" ")' \
  | column -t \
  | grep REDACTED
"""

When ran, the token is displayed in output. Is there a way to not display variable values during tasks?

[jdx]

I'm wondering how this could be implemented, here's my first thought:

[tasks.tfcmods]
description = "Show the latest versions of TFC modules"
run = """
curl -s --header "Authorization: Bearer {{env.TFC_GROUP_TOKEN_DEV | redact}}"
"""

but then I thought you probably want to redact it from anything mise outputs so we should have this at a higher level, maybe like this:

[redactions]
env = ["TFC_GROUP_TOKEN_DEV"]

[aclarknexient]

I like the idea of a global "redact this list of vars" like you have in the second example, it's a single place to make changes. Plus it's opt-in, so it shouldn't change the way other folks are using mise.

Is much more complexity added by something like a regex for that redactions list?

[redactions]
env = [
  "/.*TOKEN.*/",
  "SECRET_VAR_NAME",
]

I hope this isn't opening another can of worms!!