-
Bug
-
Resolution: Fixed
-
Major
-
None
We want to have a block statement that allows sensitive tokens to be masked from the console output inside the body, such as:
maskPassword("s3cr3t!") {
echo "Hello s3cr3t!" // this should produce "Hello ***********" or something
}
The exact syntax can be anything, but the above one would prove the concept that this can be done in a composable manner.
- depends on
-
JENKINS-27392 API to decorate console output
-
- Resolved
-
- is related to
-
-
- Resolved
-
-
-
- Open
-
- relates to
-
JENKINS-36007 Way to mask arbitrary Secret (was: Password is clear on log with input parameter)
-
- Open
-
- links to
[JENKINS-27486] Workflow step to mask console output
Code changed in jenkins
User: Jesse Glick
Path:
src/test/java/org/jenkinsci/plugins/credentialsbinding/impl/BindingStepTest.java
http://jenkins-ci.org/commit/credentials-binding-plugin/6673cd9dde0bf13682852a502b56eca64a26b4e9
Log:
JENKINS-27486 Reproduced problem in test.
Code changed in jenkins
User: Jesse Glick
Path:
pom.xml
src/main/java/org/jenkinsci/plugins/credentialsbinding/impl/BindingStep.java
src/test/java/org/jenkinsci/plugins/credentialsbinding/impl/BindingStepTest.java
http://jenkins-ci.org/commit/credentials-binding-plugin/9d48a1036801612e02d8642211e9b188bd804f79
Log:
[FIXED JENKINS-27486] Mask passwords accidentally sent to log.
Hi jglick,
since this seems to be resolved, could you please provide a link to some documentation on how to use it? From what I see in the linked commits, this only works with the WithCredentials step - which is not what had been asked for in this issue (and is not what I need) - hence I am asking whether the requirement in the description has been met or not.
I also posted a question on SO, which might make things clearer: https://stackoverflow.com/questions/52551232/hiding-passwords-in-jenkins-pipeline-log-output-without-using-withcredentials
Thanks a lot for your work and your help!
Michael
Would like the Mask Passwords plugin to be able to do this via SimpleBuildWrapper; and BindingStep in the Credentials Binding plugin should also do this.