diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
new file mode 100644
index 0000000..166662c
--- /dev/null
+++ b/.github/workflows/test.yml
@@ -0,0 +1,18 @@
+name: Test for workflow
+on: push
+defaults:
+  run:
+    shell: bash -euxo pipefail {0}
+jobs:
+  generate-a-secret-output:
+    runs-on: ubuntu-latest
+    steps:
+      - id: sets-a-secret
+        name: Generate, mask, and output a secret
+        run: |
+          the_secret=$((RANDOM))
+          echo "::add-mask::$the_secret"
+          echo "secret-number=$the_secret" >> "$GITHUB_OUTPUT"
+      - name: Use that secret output (protected by a mask)
+        run: |
+          echo "the secret number is ${{ steps.sets-a-secret.outputs.secret-number }}"
diff --git a/test.yml b/test.yml
deleted file mode 100644
index a043f2b..0000000
--- a/test.yml
+++ /dev/null
@@ -1,10 +0,0 @@
-name: Test for workflow
-on: push
-jobs:
-  testmask:
-      runs-on: ubuntu-latest
-    env:
-      MY_NAME: "Mona The Octocat"
-    steps:
-      - name: bash-version
-        run: echo "::add-mask::$MY_NAME"