From 5e52f9e6dbea49944f2ad84efebb03ff37a60cff Mon Sep 17 00:00:00 2001
From: John Ko <279736+johnko@users.noreply.github.com>
Date: Sun, 16 Nov 2025 11:28:36 -0500
Subject: [PATCH] Add .github/tf.sh

---
 .github/tf.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/tf.sh b/.github/tf.sh
index 0ff4c54..801a386 100644
--- a/.github/tf.sh
+++ b/.github/tf.sh
@@ -2,9 +2,9 @@
 set -eo pipefail
 
 if [[ -e .envrc ]]; then
-  set -x
-  source .envrc
   set +x
+  # hide secret env values from output
+  source .envrc
 fi
 
 if [[ -z $IAC_BIN ]]; then