diff --git a/.github/workflows/foo.yml b/.github/workflows/foo.yml
new file mode 100644
index 000000000..0173952d0
--- /dev/null
+++ b/.github/workflows/foo.yml
@@ -0,0 +1,35 @@
+name: foo
+
+on:
+  pull_request:
+    branches: [main]
+
+
+jobs:
+  foo:
+    runs-on: ubuntu-latest
+    env:
+      FOO: ${{ secrets.FOO }}
+
+    steps:
+      - run: |
+          echo "$FOO" | while IFS='=' read -r key value; do
+            echo "::add-mask::$value"
+            echo "$key=$value" >> "$GITHUB_ENV"
+          done
+      - run: |
+          env
+
+  bar:
+    runs-on: ubuntu-latest
+    env:
+      BAR: ${{ variables.BAR }}
+
+    steps:
+      - run: |
+          echo "$BAR" | while IFS='=' read -r key value; do
+            echo "::add-mask::$value"
+            echo "$key=$value" >> "$GITHUB_ENV"
+          done
+      - run: |
+          env