From f9cc43b63d30cb85e3dd2f7a4735a2fe78d9551b Mon Sep 17 00:00:00 2001
From: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Date: Tue, 6 Jan 2026 11:20:01 +0100
Subject: [PATCH] ensure passwords are redacted with registry-auth

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
---
 src/main.ts | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/main.ts b/src/main.ts
index 0e2d000..cc0e49f 100644
--- a/src/main.ts
+++ b/src/main.ts
@@ -39,6 +39,9 @@ export async function main(): Promise<void> {
     } else {
       registries.push(auth.registry);
     }
+    if (auth.password) {
+      core.setSecret(auth.password);
+    }
   }
   stateHelper.setRegistries(registries.filter((value, index, self) => self.indexOf(value) === index));