diff --git a/infisical/fetch-secret/action.yml b/infisical/fetch-secret/action.yml
index 268170c..ae45d3a 100644
--- a/infisical/fetch-secret/action.yml
+++ b/infisical/fetch-secret/action.yml
@@ -24,7 +24,7 @@ inputs:
     default: "/"
 outputs:
   value:
-    description: "The fetched secret value"
+    description: "The fetched secret value (base64-encoded)"
     value: ${{ steps.fetch.outputs.value }}
 
 runs:
@@ -61,10 +61,11 @@ runs:
           exit 1
         fi
 
-        echo "::add-mask::$VALUE"
+        B64=$(printf '%s' "$VALUE" | base64 | tr -d '\n')
+        echo "::add-mask::$B64"
 
         DELIMITER="INFISICAL_EOF_$$"
         echo "value<<${DELIMITER}" >> "$GITHUB_OUTPUT"
-        echo "$VALUE" >> "$GITHUB_OUTPUT"
+        printf '%s\n' "$B64" >> "$GITHUB_OUTPUT"
         echo "${DELIMITER}" >> "$GITHUB_OUTPUT"
         echo "Successfully fetched secret '${{ inputs.SECRET_NAME }}'"
diff --git a/kubectl/configure/action.yml b/kubectl/configure/action.yml
index 45c992a..f687d9c 100644
--- a/kubectl/configure/action.yml
+++ b/kubectl/configure/action.yml
@@ -2,7 +2,7 @@ name: Configure Kubectl
 description: Configure kubectl for use with Kubernetes
 inputs:
   K8S_CONFIG:
-    description: "The RAW Kubernetes config"
+    description: "The base64-encoded Kubernetes config"
     required: true
   K8S_NAMESPACE:
     description: "The K8S namespace"
@@ -28,7 +28,7 @@ runs:
         echo "Configuring kubectl for context=${{ inputs.K8S_CONTEXT }} namespace=${{ inputs.K8S_NAMESPACE }}"
         rm -f ~/.kube/config
         mkdir -p ~/.kube
-        printf '%s' "$K8S_CONFIG" > ~/.kube/config
+        printf '%s' "$K8S_CONFIG" | base64 -d > ~/.kube/config
         kubectl config set-context ${{ inputs.K8S_CONTEXT }} --cluster=${{ inputs.K8S_CONTEXT }} --namespace=${{ inputs.K8S_NAMESPACE }}
         kubectl config use-context ${{ inputs.K8S_CONTEXT }}
         echo "kubectl configured successfully"