Major While credentials in the build log are masked, they are still displayed in clear text in the Pipeline Steps page (<build-url>/flowGraphTable) and the Stags Logs popover that can be opened on the Stage View page.
As a user of this plugin I would want the vault plugin to behave like the credentials binding plugin https://wiki.jenkins-ci.org/display/JENKINS/Credentials+Binding+Plugin and mask any passwords from the UI.
(The pipeline in my examples uses withVault(...) {...}.)
- is duplicated by
-
JENKINS-64392 Upgrading workflow-cps to 2.85 or later leaks credentials in ui
-
- Resolved
-
- links to
[JENKINS-64338] Credentials of pipeline jobs not properly masked in the UI when using withVault
Pascal Hofmann
created issue -
| Assignee | Original: Peter Tierno [ ptierno ] | New: Dietmar Scheidl [ scddev ] |
| Status | Original: Open [ 1 ] | New: In Progress [ 3 ] |
| Remote Link | New: This issue links to "PR (Web Link)" [ 26607 ] |
| Status | Original: In Progress [ 3 ] | New: In Review [ 10005 ] |
| Released As | New: https://github.com/jenkinsci/hashicorp-vault-plugin/releases/tag/hashicorp-vault-plugin-3.8.0 | |
| Resolution | New: Fixed [ 1 ] | |
| Status | Original: In Review [ 10005 ] | New: Resolved [ 5 ] |
| Link |
New:
This issue is duplicated by |
Released as Release 3.8.0 · jenkinsci/hashicorp-vault-plugin (github.com)