Incomplete example?

[rainabba]

While googling on set-mask, I hit an article that landed me on your sample here. I don't feel that example is useful because anything contained as a secret is masked anyway. I think a more useful example would generates/retrieves a value from somewhere other than secrets., without exposing it in the process, then load value to an environmental variable and use that variable in a way that shows it being masked in the logs.

Sorry for the run-on and I hope you find this feedback helpful.