Sharing a job folder exposes blazemeter API token

XMLWordPrintable

      if you share a Jenkins job folder the resulting build.xml contains your blazemeter API token.

      The API token should be only stored encrypted as a credential.

       

      ..../builds/14/build.xml
          <hudson.plugins.blazemeter.PerformanceBuildAction plugin="BlazeMeterJenkinsPlugin@4.7">
            <run class="flow-build" reference="../../.."/>
            <reportUrl>https://a.blazemeter.com/app/?public-token=REDACTED#/masters/ID/summary</reportUrl> 

            Assignee:
            Unassigned
            Reporter:
            Ronnie
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: