Replace the userinfo of a URL (https://user:secret@host/...) with ***, so a
credential in a base URL never reaches an error message, a log or CI output.
A value that does not parse as a URL (a port typo, an unencoded # in the
password, no scheme) has its userinfo cut out by text (credentialsIn); a
value without userinfo is returned unchanged.
Replace the userinfo of a URL (
https://user:secret@host/...) with***, so a credential in a base URL never reaches an error message, a log or CI output. A value that does not parse as a URL (a port typo, an unencoded#in the password, no scheme) has its userinfo cut out by text (credentialsIn); a value without userinfo is returned unchanged.