Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-40064

Inject password as env var. masks all instances of password string

XMLWordPrintable

      When injecting a password as an environment variable I expect it to be masked in the Jenkins output console. This works as expected, but the password string is masked for every single match in the console output, even when it is not meant to be a password.

      I found this by accident as I was experimenting. You shouldn't run into this all that often, but I thought I should point it out.

      By looking at the screenshots attached I'm pretty sure you can all guess what my password was set to.

        1. Screen Shot 2016-11-28 at 11.06.03.png
          Screen Shot 2016-11-28 at 11.06.03.png
          73 kB
        2. Screen Shot 2016-11-28 at 11.07.03.png
          Screen Shot 2016-11-28 at 11.07.03.png
          57 kB

          [JENKINS-40064] Inject password as env var. masks all instances of password string

          Oleg Nenashev added a comment -

          Unfortunately I will not have time to work on EnvInject issues for a while. I decided to unassign all issues so that somebody can take them and finalize.

          Context: The plugin has been waiting for adoption for ~2 years. During all this time I was trying to keep this plugin afloat by reviewing the incoming pull requests, fixing defects and keeping the codebase up to date to simplify the handover. But I have not been using this plugin on my own so that such maintenance was a bit lame. I invite all active users to contribute to the plugin by taking ownership of this plugin and of EnvInject API. I am happy to provide any required knowledge transfers and do some assistance during the first months of maintenance

          Oleg Nenashev added a comment - Unfortunately I will not have time to work on EnvInject issues for a while. I decided to unassign all issues so that somebody can take them and finalize. Context: The plugin has been waiting for adoption for ~2 years. During all this time I was trying to keep this plugin afloat by reviewing the incoming pull requests, fixing defects and keeping the codebase up to date to simplify the handover. But I have not been using this plugin on my own so that such maintenance was a bit lame. I invite all active users to contribute to the plugin by taking ownership of this plugin and of EnvInject API. I am happy to provide any required knowledge transfers and do some assistance during the first months of maintenance

            Unassigned Unassigned
            mnordsletten Martin Nordsletten
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: