Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-19528

Mask Password Plugin should support Maven Style Projects

    • Icon: Improvement Improvement
    • Resolution: Unresolved
    • Icon: Major Major
    • mask-passwords-plugin
    • None

      In Maven 2/3 Projects, the Mask Password Plugin doesn't add the passwords as parameters before launching the build. Therefore passwords are not set for the build.

      A single class can be updated to support Maven 2/3 projects. I add it as attachment (and as example, since code is ugly).

          [JENKINS-19528] Mask Password Plugin should support Maven Style Projects

          Patrick Roth added a comment -

          The proposed solution is not the right one: it writes the passwords in the build configuration. Not what was expected.

          Patrick Roth added a comment - The proposed solution is not the right one: it writes the passwords in the build configuration. Not what was expected.

          Last activity on this one is dated 2013. Any improvement? I am still experiencing the issue (plugin version 2.7.2).

          Matteo Castellarin added a comment - Last activity on this one is dated 2013. Any improvement? I am still experiencing the issue (plugin version 2.7.2).

          Daniel Beck added a comment -

          You wanting something does not make it a blocker.

          It looks like the plugin is currently without an active maintainer, so it should be possible for you to apply for commit access to fix this.

          Daniel Beck added a comment - You wanting something does not make it a blocker. It looks like the plugin is currently without an active maintainer, so it should be possible for you to apply for commit access to fix this.

          A security plugin unmaintained for already 3 years and having a security issue is actually blocking.

          Moving beyond the controversy: it is not clear whether the problem is with the plugin itself or with Jenkins, who erroneously propagates the properties

          Matteo Castellarin added a comment - A security plugin unmaintained for already 3 years and having a security issue is actually blocking. Moving beyond the controversy: it is not clear whether the problem is with the plugin itself or with Jenkins, who erroneously propagates the properties

          Daniel Beck added a comment -

          A security plugin unmaintained for already 3 years and having a security issue is actually blocking.

          FWIW security issues should be filed in the SECURITY project. But AFAIU this is just the case that the plugin does not support the Maven job type, i.e. it does not work, rather than e.g. make the passwords public? Please clarify if I'm wrong about this.

          Daniel Beck added a comment - A security plugin unmaintained for already 3 years and having a security issue is actually blocking. FWIW security issues should be filed in the SECURITY project. But AFAIU this is just the case that the plugin does not support the Maven job type, i.e. it does not work, rather than e.g. make the passwords public? Please clarify if I'm wrong about this.

          Dave Taddei added a comment -

          We are also experiencing this issue since moving to an access controlled repository. Is there any movement?

          Dave Taddei added a comment - We are also experiencing this issue since moving to an access controlled repository. Is there any movement?

            danielpetisme Daniel Petisme
            pmjroth Patrick Roth
            Votes:
            2 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated: