[anttiharju]

One can get the ssh access with self-hosted runners but it is problematic because uncovering secrets becomes trivial.

[SAI_Peregrinus]

Uncovering secrets is usually trivial. `printenv` in a build script does that pretty reliably.

[anttiharju]

What do you mean? Simple env prints get masked as *** in logs

I guess one can always just echo the secret to a file and upload-artifact it