chore: apply revision

Signed-off-by: Rogerio Angeliski <angeliski@hotmail.com>

.changeset/fruity-rivers-arrive.md

@@ -1,6 +1,5 @@
 ---
 '@backstage/plugin-scaffolder-backend': minor
-'@backstage/plugin-scaffolder-node': patch
 ---
 
 Add `defaultEnvironment` config to scaffolder to enable more flexible and custom templates. Now it's possible enable access to default parameters and secrets in templates, improving security and reducing complexity.

plugins/scaffolder-backend/src/scaffolder/tasks/NunjucksWorkflowRunner.ts

@@ -108,12 +108,12 @@ const createStepLogger = ({
   task,
   step,
   rootLogger,
-  secretsForRedaction,
+  redactions,
 }: {
   task: TaskContext;
   step: TaskStep;
   rootLogger: LoggerService;
-  secretsForRedaction?: string[];
+  redactions?: Record<string, string>;
 }) => {
   const taskLogger = WinstonLogger.create({
     level: process.env.LOG_LEVEL || 'info',
@@ -124,8 +124,7 @@ const createStepLogger = ({
     transports: [new BackstageLoggerTransport(rootLogger, task, step.id)],
   });
 
-  taskLogger.addRedactions(Object.values(task.secrets ?? {}));
-  taskLogger.addRedactions(Object.values(secretsForRedaction ?? {}));
+  taskLogger.addRedactions(Object.values(redactions ?? {}));
 
   return { taskLogger };
 };
@@ -280,9 +279,10 @@ export class NunjucksWorkflowRunner implements WorkflowRunner {
         task,
         step,
         rootLogger: this.options.logger,
-        secretsForRedaction: this.environment?.secrets
-          ? Object.values(this.environment.secrets)
-          : [],
+        redactions: {
+          ...task.secrets,
+          ...this.environment?.secrets,
+        },
       });
 
       if (task.isDryRun) {