<html><body>
<h3>Evgheni Dereveanchin created OVIRT-1940:</h3>
<pre> Summary: Do not show injected variables in Jenklins
Key: OVIRT-1940
URL: https://ovirt-jira.atlassian.net/browse/OVIRT-1940
Project: oVirt - virtualization made easy
Issue Type: Task
Reporter: Evgheni Dereveanchin
Assignee: infra</pre>
<p>We use the Environment Injector Plugin and a recent security advisory for Jenkins recommends disabling display of injected variables via the UI/API to avoid leakage of sensitive data: <a href="https://jenkins.io/security/advisory/2018-02-26/#SECURITY-248">https://jenkins.io/security/advisory/2018-02-26/#SECURITY-248</a></p>
<p>This can be done in settings -> Configure Global Security -> Do not show injected variables</p>
<p>I performed this change on staging already.</p>
<p>— This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100082)</p>
<img src="https://u4043402.ct.sendgrid.net/wf/open?upn=i5TMWGV99amJbNxJpSp2-2BJ33BSM3tuiUfRTk64K-2BOjHVixifWxe-2FeCnf2feBTTo04LraL7gSdAIqhTpgpf4CdF-2BQCxd5-2Fr42wd8kpk8l4YO1FAiYxuund4d9tUc3vfGNWhF0pbt6f-2BjUwsbL-2Fk72snAQ-2Bmd2LFEWvu-2BFpgHKmiFpxa-2BPbU2wNCr-2FU1rCRf1U7bVItop4OHnyhrGtor5S3d-2FGKUJX8sOIa24nwZ-2F5x2jFc-2B4lBUpR54wpBV-2BGKbsOpWfwdBXMiNuuUIFoEIrsPh7Kf5t8DGtafS8la6ODzWbreQiagiDpztOIqhxwNpOUaveCuGLCI8lp0Em0fZYbIFTAn6x-2BKhA7a4UWyROUF6NdoBi2D7f3JCfKpi1Acl0zT8Yh9jQLzBBNUD7xNHx2eiEQ7PWj8XHTBhcz4c5bEpmGqgBILLHzY8z1iSDdTJUb69lg6flJFKzWbewf1mbCXA-3D-3D" alt="" width="1" height="1" border="0" style="height:1px !important;width:1px !important;border-width:0 !important;margin-top:0 !important;margin-bottom:0 !important;margin-right:0 !important;margin-left:0 !important;padding-top:0 !important;padding-bottom:0 !important;padding-right:0 !important;padding-left:0 !important;"/>
</body></html>