fix: don't replace empty secrets (#725)

pkg/runner/logger.go

@@ -68,9 +68,11 @@ func (f *stepLogFormatter) Format(entry *logrus.Entry) ([]byte, error) {
 	// Replace any secrets in the entry if insecure-secrets flag is not used
 	if !f.insecureSecrets {
 		for _, v := range f.secrets {
+			if v != "" {
 				entry.Message = strings.ReplaceAll(entry.Message, v, "***")
 			}
 		}
+	}
 
 	if f.isColored(entry) {
 		f.printColored(b, entry)