workflow_dispatch: Passing Secrets in at runtime

[MikeRochfordTR]

Select Topic Area

Product Feedback

Body

The workflow I am working on takes git credentials(user and pat) as input, as the person running the workflow doesn't own the repository. The workflow is kicked off via an internal site using credentials managed by my team.

The issue we are running into is how to secure the passed git credentials from every showing up in the logs. I have been banging my head against the wall for several days and can't find a solution.

resulting log

In this instance, both inputs had the value of 'unset' passed.

[ooaklee]

Hey @MikeRochfordTR, I hope you're doing well.

I wanted to check in with you to see if you're still experiencing the issue. I've developed an Action called Interactive Inputs that allows users to add runtime inputs to their workflows/actions and more. After reviewing your topic, I thought about adding an isSecret property to the text and textarea field types of the action. This feature would ensure that any values passed are appropriately masked when set. Would something like this have solved your use case?