{"action":"created","issue":{"url":"https://api.github.com/repos/drone/drone/issues/904","labels_url":"https://api.github.com/repos/drone/drone/issues/904/labels{/name}","comments_url":"https://api.github.com/repos/drone/drone/issues/904/comments","events_url":"https://api.github.com/repos/drone/drone/issues/904/events","html_url":"https://github.com/drone/drone/issues/904","id":59730298,"number":904,"title":"secret variables evaluated in bash deploy script","user":{"login":"JeanMertz","id":383250,"avatar_url":"https://avatars.githubusercontent.com/u/383250?v=3","gravatar_id":"","url":"https://api.github.com/users/JeanMertz","html_url":"https://github.com/JeanMertz","followers_url":"https://api.github.com/users/JeanMertz/followers","following_url":"https://api.github.com/users/JeanMertz/following{/other_user}","gists_url":"https://api.github.com/users/JeanMertz/gists{/gist_id}","starred_url":"https://api.github.com/users/JeanMertz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JeanMertz/subscriptions","organizations_url":"https://api.github.com/users/JeanMertz/orgs","repos_url":"https://api.github.com/users/JeanMertz/repos","events_url":"https://api.github.com/users/JeanMertz/events{/privacy}","received_events_url":"https://api.github.com/users/JeanMertz/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-03-04T00:17:59Z","updated_at":"2015-03-04T00:34:08Z","closed_at":"2015-03-04T00:20:59Z","body":"this:\r\n\r\n```yaml\r\ndeploy:\r\n  bash:\r\n    command: curl --data \"build=true\" -X POST https://registry.hub.docker.com/u/my/image/trigger/$$DOCKER_BUILD_TOKEN\r\n```\r\n\r\ngets evaluated and `$$DOCKER_BUILD_TOKEN` is replaced by the actual value set through the GUI. Even when the GUI states those are \"secret\" variables.\r\n\r\nEven when logged out, I can see the real value in the public log output."},"comment":{"url":"https://api.github.com/repos/drone/drone/issues/comments/77073538","html_url":"https://github.com/drone/drone/issues/904#issuecomment-77073538","issue_url":"https://api.github.com/repos/drone/drone/issues/904","id":77073538,"user":{"login":"JeanMertz","id":383250,"avatar_url":"https://avatars.githubusercontent.com/u/383250?v=3","gravatar_id":"","url":"https://api.github.com/users/JeanMertz","html_url":"https://github.com/JeanMertz","followers_url":"https://api.github.com/users/JeanMertz/followers","following_url":"https://api.github.com/users/JeanMertz/following{/other_user}","gists_url":"https://api.github.com/users/JeanMertz/gists{/gist_id}","starred_url":"https://api.github.com/users/JeanMertz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JeanMertz/subscriptions","organizations_url":"https://api.github.com/users/JeanMertz/orgs","repos_url":"https://api.github.com/users/JeanMertz/repos","events_url":"https://api.github.com/users/JeanMertz/events{/privacy}","received_events_url":"https://api.github.com/users/JeanMertz/received_events","type":"User","site_admin":false},"created_at":"2015-03-04T00:34:08Z","updated_at":"2015-03-04T00:34:08Z","body":"@bradrydzewski awesome thanks.\r\n\r\nTotally unrelated (but maybe too simple to open a new issue):\r\n\r\nIs it possible to have drone use the `ENTRYPOINT` script of an image when starting the build container?"}}