• Type: Bug
• Resolution: Unresolved
• Priority: Minor
• Component/s: blazemeterjenkinsplugin-plugin
• Labels:

  None

[JENKINS-66452] Sharing a job folder exposes blazemeter API token

Ronnie created issue - 2021-08-25 18:37

Ronnie made changes - 2021-08-25 19:15

Summary

Original: Sharing a job folder exposes buildmeter API token

New: Sharing a job folder exposes blazemeter API token

Ronnie made changes - 2021-08-25 19:15

Description

Original: if you share a Jenkins job folder the resulting build.xml contains your buildmeter API token. The API token should be only stored encrypted as a credential.   {code:java} ..../builds/14/build.xml     <hudson.plugins.blazemeter.PerformanceBuildAction plugin="BlazeMeterJenkinsPlugin@4.7">       <run class="flow-build" reference="../../.."/>       <reportUrl>https://a.blazemeter.com/app/?public-token=REDACTED#/masters/36502973/summary&lt;/reportUrl> {code}

New: if you share a Jenkins job folder the resulting build.xml contains your blazemeter API token. The API token should be only stored encrypted as a credential.   {code:java} ..../builds/14/build.xml     <hudson.plugins.blazemeter.PerformanceBuildAction plugin="BlazeMeterJenkinsPlugin@4.7">       <run class="flow-build" reference="../../.."/>       <reportUrl>https://a.blazemeter.com/app/?public-token=REDACTED#/masters/36502973/summary&lt;/reportUrl> {code}

Ronnie made changes - 2021-08-25 19:15

Description

Original: if you share a Jenkins job folder the resulting build.xml contains your blazemeter API token. The API token should be only stored encrypted as a credential.   {code:java} ..../builds/14/build.xml     <hudson.plugins.blazemeter.PerformanceBuildAction plugin="BlazeMeterJenkinsPlugin@4.7">       <run class="flow-build" reference="../../.."/>       <reportUrl>https://a.blazemeter.com/app/?public-token=REDACTED#/masters/36502973/summary&lt;/reportUrl> {code}

New: if you share a Jenkins job folder the resulting build.xml contains your blazemeter API token. The API token should be only stored encrypted as a credential.   {code:java} ..../builds/14/build.xml     <hudson.plugins.blazemeter.PerformanceBuildAction plugin="BlazeMeterJenkinsPlugin@4.7">       <run class="flow-build" reference="../../.."/>       <reportUrl>https://a.blazemeter.com/app/?public-token=REDACTED#/masters/ID/summary&lt;/reportUrl> {code}