no_log.yml

---

- hosts: all
  gather_facts: false
  vars:
    secret_value: "Something secret"

  tasks:
    - name: task with stdout
      command: 'echo {{ secret_value }}'
      no_log: true
      changed_when: false
      register: result

    - name: Assert that stdout was redacted
      assert:
        that:
            - '"{{ secret_value }}" not in result.stdout'
    - name: task with stderr
      shell: 'cat <<< "{{ secret_value }}" 1>&2'
      no_log: true
      changed_when: false
      register: result

    - name: Assert that stderr was redacted
      assert:
        that:
            - '"{{ secret_value }}" not in result.stderr'