jenkinsci / jenkinsci/git-plugin
[JENKINS-61824] Git plugin credential lookup uses too low level API
- Dominant language
- Java
- Stars
- 694
- Forks
- 1.1k
- Avg merge
- 1h 29m
- Merged PRs (30d)
- 3
Description
In GitSCMFileSystem.build(), this bypasses several features provided natively by the credentials plugin including user-scoped credentials, authorize project scoped credentials, other sources, and the credential parameter shadowing feature. This should instead use CredentialsProvider.findCredentialsById() with the listed domain requirements and the associated run.
---
Originally reported by
jvz, imported from: Git plugin credential lookup uses too low level API
Raw content of original issue
In GitSCMFileSystem.build(), this bypasses several features provided natively by the credentials plugin including user-scoped credentials, authorize project scoped credentials, other sources, and the credential parameter shadowing feature. This should instead use CredentialsProvider.findCredentialsById() with the listed domain requirements and the associated run.
Contributor guide
Assessment
This issue has not been assessed yet.