Security leak - passwords are visible in workspace (git / http)

This issue is archived. You can view it, but you can't modify it. Learn more

XMLWordPrintable

      Maven-Jobs with git-SCMs using http-URLs: The credentials are automatically attached to the URL for the remote repository. Thus the password is visible for all users reading the workspace-directory (see attachments).

      I know that the password >has< to be set somewhere. I suggest to force the usage of ~/.netrc. This file is visible for the build admin only!

      Note: This is not identical with JENKINS-4428!

            Assignee:
            Nicolas De Loof
            Reporter:
            chrisabit
            Archiver:
            Jenkins Service Account

              Created:
              Updated:
              Resolved:
              Archived: