-
-
Notifications
You must be signed in to change notification settings - Fork 104
Tokens and password stored in plaintext! #121
Copy link
Copy link
Open
Labels
Description
Jenkins and plugins versions report
Environment
OS: Linux - 4.15.0-225-generic
Java: 21.0.3 - Eclipse Adoptium (OpenJDK 64-Bit Server VM)
---
What Operating System are you using (both controller, and any agents involved in the problem)?
Ubuntu
Reproduction steps
- Go to https://plugins.jenkins.io/github-pr-coverage-status/
- Read the security error
Optional:
3. Open com.github.terma.jenkins.githubprcoveragestatus.Configuration.xml
4. Note that your personal access token is indeed stored in plaintext
Expected Results
My precious secrets to be encrypted and not stored in plaintext
Actual Results
My precious secrets were stored in plaintext
Anything else?
This deserves it's own patch. This is critically important.
Are you interested in contributing a fix?
No response
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
Type
Fields
Give feedbackNo fields configured for issues without a type.