A Github action that ensures repository_dispatch event parameters are not shown in Github actions build output. These parameters are the contents of the client_payload field from the event.

Optional A comma-separated list of parameters that should be ignored by this action.

uses: cultureamp/protect-event-parameters-action
with:
  whitelist: 'field1,field2'

Given a client_payload that contains field_1, field_2 and field_3, after this action runs the value supplied in field_3 will be masked from all log outputs (using the appropriate workflow commands).

Note that the compiled output is committed to the repo, as required by GH actions.

# download dependencies
npm ci

# packs result
npm run build

The build uses @zeit/ncc to compile dependencies into one file, rather than requiring node_modules to be committed.