Never echo secrets in logs?

Mask secrets automatically using:

run: echo "Deploying..." && echo "${{ secrets.AWS_SECRET_KEY }}"

• GitHub automatically redacts these values from logs.