Craigs-MacBook-Pro.local

ci/docker-build-package.sh

@@ -15,14 +15,16 @@ export JOB_BASE_NAME=label=$label
 docker build -t $name -f "${NTECH_ROOT}/buildscripts/ci/Dockerfile-$name" .
 
 # add secret key to enable push up to sftp cache
+set +x # hide secrets
 if [ -n "$GH_ACTIONS_SSH_KEY_BUILD_ARTIFACTS_CACHE" ]; then
   export SECRET="$GH_ACTIONS_SSH_KEY_BUILD_ARTIFACTS_CACHE"
 else
-  if ! export SECRET=$(pass mystiko/developers/CFEngine/jenkins/sftp-cache.sec); then
+  if ! export SECRET="$(pass mystiko/developers/CFEngine/jenkins/sftp-cache.sec)"; then
     echo "The sftp cache ssh secret key must be provided, either with environment variable GH_ACTIONS_SSH_KEY_BUILD_ARTIFACTS_CACHE or access to mystiko path developers/CFEngine/jenkins/sftp-cache.sec"
     exit 1
   fi
 fi
+set -x # done hiding secrets
 # send in JOB_BASE_NAME to enable use of retrieved or generated deps cache
 docker run -d --env SECRET --env JOB_BASE_NAME --privileged -v "${NTECH_ROOT}":/data --name $name $name