Reading through the code, it wouldn’t hurt to explicitly add a mask for the token. Runner will pattern match against the GitHub token formats it recognizes, but sometimes a new pattern roles out that the runner isn’t updated for yet.

—@joshmgross

See https://github.com/actions/toolkit/tree/main/packages/core#setting-a-secret. Add to end of /main/lib/main.js