diff --git a/.github/actions/setup-cf/action.yaml b/.github/actions/setup-cf/action.yaml
index b2e82677..c129146c 100644
--- a/.github/actions/setup-cf/action.yaml
+++ b/.github/actions/setup-cf/action.yaml
@@ -100,6 +100,7 @@ runs:
         fi
         make up
 
+        sed 's/^[^=]*=/::add-mask::/' temp/secrets.env
         cat temp/secrets.env >> "$GITHUB_ENV"
     - name: Login
       shell: bash