The build:pass job prints environment variables, some of which
  may contain sensitive data.
  This update ensures that variables with names matching substrings
  in FILTER_LIST have their values masked