Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-44652

build info not honouring masked passwords

    XMLWordPrintable

    Details

    • Similar Issues:

      Description

      When the artifactory plugin uploads build info it does not check the settings of the mask password plugin.  As a result any passwords included as environment variables are uploaded in plain text to artifactory and cannot be removed (to my knowledge).

      The current workaround is to exclude the passwords using the exclude patterns however as the default exclusions cannot be set globally this doesn't stop further exposure.

      Two requested actions:

      1.  honour the mask passwords plugin settings
      2. allow default exclusions to be configured

        Attachments

          Activity

          There are no comments yet on this issue.

            People

            Assignee:
            eyalbe Eyal Ben Moshe
            Reporter:
            drtaddei Dave Taddei
            Votes:
            1 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated: