We hit this in Cloud Foundry Buildpacks, where all the builds and logs are completely public[0]. The team wrote and added Concourse-Filter[1]. You stream logs

We hit this in Cloud Foundry Buildpacks, where all the builds and logs are completely public[0]. The team wrote and added Concourse-Filter[1]. You stream logs through it. It compares what's going past to current environment variables. Anytime something goes past that looks like one of the environment variables, it blanks it out. You can set a whitelist for things you're not fussed about. Disclosure: I have twice worked on Buildpacks on behalf of Pivotal. [0] https://buildpacks.ci.cf-app.com/ https://buildpacks.ci.cf-app.com/ [1] https://github.com/pivotal-cf-experimental/concourse-filter https://github.com/pivotal-cf-experimental/concourse-filter