[JIRA] (JENKINS-36007) Way to mask arbitrary Secret (was: Password is clear on log with input parameter)
Title: Message Title Jesse Glick updated an issue Jenkins / JENKINS-36007 Way to mask arbitrary Secret (was: Password is clear on log with input parameter) Change By: Jesse Glick Labels: pipeline plugin security Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-36007) Way to mask arbitrary Secret (was: Password is clear on log with input parameter)
Title: Message Title Jesse Glick updated an issue Jenkins / JENKINS-36007 Way to mask arbitrary Secret (was: Password is clear on log with input parameter) Change By: Jesse Glick Component/s: credentials-binding-plugin Component/s: mask-passwords-plugin Component/s: pipeline Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-36007) Way to mask arbitrary Secret (was: Password is clear on log with input parameter)
Title: Message Title Jesse Glick updated an issue Jenkins / JENKINS-36007 Way to mask arbitrary Secret (was: Password is clear on log with input parameter) Secrets are not masked unless you do something specific to mask them, such as using the Credentials Binding or Mask Passwords plugin. In this case, PasswordParameterValue returns a Secret value, which SecretPickle does ensure is not stored in cleartext in the build record itself (program.dat), but we are missing a build wrapper which would let you specify that occurrences of the plaintext in subsequent log output should be masked. Change By: Jesse Glick Summary: Way to mask arbitrary Secret (was: Password is clear on log with input parameter ) Issue Type: Bug New Feature Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c)
