Add obfuscated log test

Author: sjchmiela

packages/worker/src/__unit__/logger.test.ts

@@ -1,11 +1,44 @@
 import { TransformCallback, Writable } from 'node:stream';
 import { createBuildLoggerWithSecretsFilter } from '../logger';
 import z from 'zod';
+import { EnvironmentSecretType } from '@expo/eas-build-job';
+
+async function waitForStreamFlush(): Promise<void> {
+  await new Promise(resolve => setImmediate(resolve));
+}
 
 describe('logger', () => {
-  async function waitForStreamFlush(): Promise<void> {
-    await new Promise(resolve => setImmediate(resolve));
-  }
+  it('obfuscates secrets in logs', async () => {
+    const { logger, outputStream } = await createBuildLoggerWithSecretsFilter([
+      { name: 'TEST_SECRET', value: 'secret', type: EnvironmentSecretType.STRING },
+      {
+        name: 'ANOTHER_SECRET_BASE64',
+        value: 'YW5vdGhlclNlY3JldA==',
+        type: EnvironmentSecretType.STRING,
+      },
+    ]);
+
+    const logs: any[] = [];
+
+    const writable = new Writable({
+      objectMode: true,
+      write(chunk: any, _encoding: BufferEncoding, callback: TransformCallback) {
+        logs.push(chunk);
+        callback(null, chunk);
+      },
+    });
+
+    outputStream.pipe(writable);
+
+    logger.info('this is a secret');
+    logger.info(`another secret in base64 is ${Buffer.from('anotherSecret').toString('base64')}`);
+
+    await waitForStreamFlush();
+
+    expect(logs.length).toBe(2);
+    expect(logs[0].msg).toBe('this is a ******');
+    expect(logs[1].msg).toBe('another ****** in base64 is ********************');
+  });
 
   it('adds logId to each log', async () => {
     const { logger, outputStream } = await createBuildLoggerWithSecretsFilter([]);