jenkinsci / jenkinsci/credentials-binding-plugin

[JENKINS-68554] Credentials/Password not masked in stdout of test reports

Open
#497 1 comment 0 reactions 0 assignees View on GitHub
component:credentials-binding-plugin imported-jira-issue priority:minor resolution:unresolved
Dominant language
Java
Stars
57
Forks
108
PR merge metrics
No merged PRs in 30d

Description

We use a multi brach pipeline job to run integration tests. In that pipeline we inject some credentials using withCredentials(..). The integration test logs the credentials to stdout. (I know, that's not the best idea, but it shows the problem)

In the job's console output, the username and password are masked correctly.

But in the test report, there is also a stdout section, which does not mask the username and password.

I'm not sure if the fix must be done on the side of the credentials-binding-plugin or on the side of the junit-plugin, as I don't know exactly how they play together. Please find the best place to fix that issue in order to mask the password correctly in both stdout sections.

Thank you in advance and kind regards!

---
Originally reported by felixk, imported from: Credentials/Password not masked in stdout of test reports


  • status: Open
  • priority: Minor
  • component(s): credentials-binding-plugin
  • resolution: Unresolved
  • votes: 0
  • watchers: 1
  • imported: 20251211-141027

Raw content of original issue

We use a multi brach pipeline job to run integration tests. In that pipeline we inject some credentials using withCredentials(..). The integration test logs the credentials to stdout. (I know, that's not the best idea, but it shows the problem)

In the job's console output, the username and password are masked correctly.
But in the test report, there is also a stdout section, which does not mask the username and password.

I'm not sure if the fix must be done on the side of the credentials-binding-plugin or on the side of the junit-plugin, as I don't know exactly how they play together. Please find the best place to fix that issue in order to mask the password correctly in both stdout sections.

Thank you in advance and kind regards!

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.