TODO we might want to hide the endpoint from log, if use anykey https://github.com/marketplace/actions/hide-sensitive-inputs