Skip to content

cicd: don't leak sensitive tokens

Stop using echo/printf for piping keys into stuff. echo "$key" | ssh-add - is BAD as echo is not guaranteed to be a built-in (POSIX).

Either use GitLab "variable as file", in while case the variable value is the path to a file containing the contents, or use POSIX <<-EOF or <<EOF syntax, which is guaranteed to be within the shell.