Docker and CI/CD · Middle · Question 71 of 75

CI masks secret values in logs. Why can a secret still leak?

✓Correct answer: Masking matches exact strings, so encoded values slip through
2Masking works only for secrets shorter than eight characters
3Masking is disabled whenever the job runs in a container

Explanation

Base64-encoding, splitting or writing the secret to an artifact bypasses masking. Avoid printing secrets at all and keep their scope small.

Further reading

Test yourself

Take the Docker and CI/CD · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.