GitLab CI Variables: The Surprising Masking Behavior You Need to Know

Most engineers assume GitLab’s variable masking hides references like $MY_SECRET in logs. The reality is far more aggressive — GitLab’s masking engine operates on values, not references. ...

February 11, 2026 · 2 min · Kewin Rémy