jenkinsci / jenkinsci/docker-workflow-plugin

[JENKINS-64690] update the registry login to use --password-stdin to avoid security warning

Open
#663 5 comments 0 reactions 0 assignees View on GitHub
component:docker-workflow-plugin imported-jira-issue priority:trivial resolution:unresolved
Dominant language
Java
Stars
527
Forks
422
Avg merge
10m
Merged PRs (30d)
1

Description

when using withRegistry (with credentials!), the following warning appers:

WARNING! Using --password via the CLI is insecure. Use --password-stdin

WARNING! Your password will be stored unencrypted in

Configure a credential helper to remove this warning.

See https://docs.docker.com/engine/reference/commandline/login/#credentials-store

my request is to update the usage of the cli to avoid this warning.

 

thanks.

---
Originally reported by amidar, imported from: update the registry login to use --password-stdin to avoid security warning


  • status: Open
  • priority: Trivial
  • component(s): docker-workflow-plugin
  • label(s): credentials, docker
  • resolution: Unresolved
  • votes: 6
  • watchers: 8
  • imported: 2025-12-07

Raw content of original issue

when using withRegistry (with credentials!), the following warning appers:

WARNING! Using --password via the CLI is insecure. Use --password-stdin
WARNING! Your password will be stored unencrypted in
Configure a credential helper to remove this warning.
See https://docs.docker.com/engine/reference/commandline/login/#credentials-store

my request is to update the usage of the cli to avoid this warning.

 

thanks.

environment

```
docker-workflow-plugin version: 1.25

jenkins version you use: 2.263.2

```

1 attachment

- [docker-credential-envvars](https://issues.jenkins.io/secure/attachment/54439/docker-credential-envvars)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.