diff --git a/index.js b/index.js
index a582116..a592da7 100644
--- a/index.js
+++ b/index.js
@@ -58,6 +58,11 @@ try {
     shouldRecurse,
   });
 
+  // Mask secrets in GitHub logs
+  Object.entries(keyValueSecrets).forEach(([, value]) => {
+    core.setSecret(value);
+  });
+
   core.debug(
     `Exporting the following envs", ${JSON.stringify(
       Object.keys(keyValueSecrets)
@@ -68,7 +73,6 @@ try {
   if (exportType === "env") {
     // Write the secrets to action ENV
     Object.entries(keyValueSecrets).forEach(([key, value]) => {
-      core.setSecret(value);
       core.exportVariable(key, value);
     });
     core.info("Injected secrets as environment variables");