[JENKINS-51763] Hide credentials given to the dockerfile

When using jenkins with docker plugin, If I try to launch a dockerfile from pipeline with credentials as AdditionalArguments:

def BUILDARGS

node {

     withCredentials([usernamePassword(credentialsId: 'credId', passwordVariable: 'nexusPassword', usernameVariable: 'nexusUser')]) {

  BUILDARGS = "--build-arg nexusUser=${nexusUser} --build-arg nexusPassword=${nexusPassword}"

     }

}

agent {

     dockerfile {

 dir "${projectRootLocation}"

additionalBuildArgs "$BUILDARGS"

 label 'Docker'

     }

}

Jenkins display the content of the command line :

[Pipeline] sh

[tform_xxxxxx_master-JY4H63NYHB6VJMKUFIMC2R2JWRWXIDSJ63WJCYILIZ35Y5AVGIUA] Running shell script


docker build -t 5c5a6f87c431d14fd800e3cad7bb1d9af131caa4 --build-arg nexusUser=username --build-arg nexusPassword=password -f ./Dockerfile .

Sending build context to Docker daemon 123.1MB

So it possible to hide the password and the user on the command line ?

Thanks

---
Originally reported by 20100, imported from: Hide credentials given to the dockerfile

• status: Open
  
• priority: Critical
  
• component(s): credentials-plugin
  
• resolution: Unresolved
  
• votes: 1
  
• watchers: 5
  
• imported: 2025-12-08
  

Raw content of original issue

When using jenkins with docker plugin, If I try to launch a dockerfile from pipeline with credentials as AdditionalArguments:



def BUILDARGS

node {

     withCredentials([usernamePassword(credentialsId: 'credId', passwordVariable: 'nexusPassword', usernameVariable: 'nexusUser')]) {

          BUILDARGS = "--build-arg nexusUser=${nexusUser} --build-arg nexusPassword=${nexusPassword}"

     }

}

agent {

     dockerfile {

         dir "${projectRootLocation}"

        additionalBuildArgs "$BUILDARGS"

         label 'Docker'

     }

}



Jenkins display the content of the command line :



[Pipeline] sh

[tform_xxxxxx_master-JY4H63NYHB6VJMKUFIMC2R2JWRWXIDSJ63WJCYILIZ35Y5AVGIUA] Running shell script


docker build -t 5c5a6f87c431d14fd800e3cad7bb1d9af131caa4 --build-arg nexusUser=username --build-arg nexusPassword=password -f ./Dockerfile .

Sending build context to Docker daemon 123.1MB



So it possible to hide the password and the user on the command line ?


Thanks