From 1234a70ab4711d6814d60b92601390d950e650c8 Mon Sep 17 00:00:00 2001 From: Noam Tsemah Date: Wed, 5 Aug 2026 18:01:45 +0300 Subject: [PATCH] CI: Suppress credentials in logs set -x expanded sensitive values into the job log. Switch those lines to verbose-only and restore xtrace afterwards, so the values are never traced regardless of how credentials are injected. Signed-off-by: Noam Tsemah --- .ci/scripts/coverity.sh | 2 ++ .ci/scripts/enroot_setup.sh | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/.ci/scripts/coverity.sh b/.ci/scripts/coverity.sh index 25e4d26f768..7c94a90ab06 100755 --- a/.ci/scripts/coverity.sh +++ b/.ci/scripts/coverity.sh @@ -140,8 +140,10 @@ function main() { fi echo "Uploading to synopsys main coverity server" + set +x -v cov-commit-defects --ssl --on-new-cert trust --host coverity.mellanox.com --port 8443 \ --user "${UCC_USERNAME}" --password "${UCC_PASSWORD}" --dir "$COV_BUILD_DIR" --stream ucc_master + set +v -x return 0 } diff --git a/.ci/scripts/enroot_setup.sh b/.ci/scripts/enroot_setup.sh index 843519d8df5..d734e088862 100755 --- a/.ci/scripts/enroot_setup.sh +++ b/.ci/scripts/enroot_setup.sh @@ -1,4 +1,4 @@ -#!/bin/bash -xe +#!/bin/bash -ve # Configure enroot credentials if provided if [[ -n "${ENROOT_USERNAME}" && -n "${ENROOT_PASSWORD}" ]]; then