diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 3ec814e652..824bd0cb0e 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -36,6 +36,14 @@ jobs:
           go-version-file: ./go.mod
           cache: false
 
+      - name: Apply masking
+        run: |
+          while IFS= read -r line || [[ -n $line ]]; do
+            echo "::add-mask::$line"
+          done < <(printf '%s' "$SF_TF_GH_MASKING")
+        env:
+          SF_TF_GH_MASKING: ${{ secrets.SF_TF_GH_MASKING }}
+
       - name: Install dependencies
         run: make dev-setup