diff --git a/.github/workflows/foo.yml b/.github/workflows/foo.yml
new file mode 100644
index 000000000..12e922dcc
--- /dev/null
+++ b/.github/workflows/foo.yml
@@ -0,0 +1,18 @@
+name: foo
+
+on:
+  pull_request:
+    branches: [main]
+
+
+jobs:
+  foo:
+    runs-on: ubuntu-latest
+    env:
+      TF_VARS: ${{ secrets.TF_VARS }}
+
+    steps:
+      - run: |
+          echo "$TF_VARS" | jq --raw-output 'to_entries | map("::add-mask::\(.value // empty)") | .[]'
+          echo "$TF_VARS" | jq --raw-output 'to_entries | map("TF_VAR_\(.key)=\(.value //  "")") | .[]'
+          env | sort