cert handling

Author: sean-breen

.github/actions/az-sync/action.yml

@@ -40,7 +40,7 @@ runs:
               secret_value=$(az keyvault secret show --only-show-errors --name "$secret_name" --vault-name ${{ inputs.keyvault }} --query value -o tsv)
               escaped_secret=$(printf '%s' "$secret_value" | sed ':a;N;$!ba;s/%/%25/g' | sed ':a;N;$!ba;s/\r/%0D/g' | sed ':a;N;$!ba;s/\n/%0A/g')
               echo "::add-mask::$escaped_secret"
-              echo "$secret_name=$escaped_secret" >> $GITHUB_ENV
+              echo "$secret_name=$secret_value" >> $GITHUB_ENV
             done
           done
         IFS=$old_IFS