From 79f5ca47ddf8f5dc7eed5816bb8eeaeecc4b5c47 Mon Sep 17 00:00:00 2001
From: Giulio Eulisse <10544+ktf@users.noreply.github.com>
Date: Tue, 14 May 2024 13:56:52 +0200
Subject: [PATCH] Avoid leaking secrets when running in debug mode

---
 ci/build-helpers.sh | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/ci/build-helpers.sh b/ci/build-helpers.sh
index ad5a76c1..9913d8eb 100755
--- a/ci/build-helpers.sh
+++ b/ci/build-helpers.sh
@@ -182,7 +182,9 @@ function modtime () {
 function ensure_vars () {
   # Make sure variables are defined, and export them.
   for var in "$@"; do
-    if [ -z "${!var}" ]; then
+    # The +x is needed to avoid leaking secrets when running with
+    # bash -ex
+    if [ -z ${!var+x} ]; then
       echo "$(basename "$0"): error: required variable $var not defined!" >&2
       exit 1
     else