[JIRA] (OVIRT-1940) Do not show injected variables in Jenklins

Tuesday, 20 March 2018

This is a multi-part message in MIME format...

------------=_1521571391-31396-342
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

Evgheni Dereveanchin created OVIRT-1940:
-------------------------------------------

             Summary: Do not show injected variables in Jenklins
                 Key: OVIRT-1940
                 URL: https://ovirt-jira.atlassian.net/browse/OVIRT-1940
             Project: oVirt - virtualization made easy
          Issue Type: Task
            Reporter: Evgheni Dereveanchin
            Assignee: infra

We use the Environment Injector Plugin and a recent security advisory for Jenkins
recommends disabling display of injected variables via the UI/API to avoid leakage of
sensitive data:
https://jenkins.io/security/advisory/2018-02-26/#SECURITY-248

This can be done in settings -> Configure Global Security -> Do not show injected
variables

I performed this change on staging already.

--
This message was sent by Atlassian Jira
(v1001.0.0-SNAPSHOT#100082)

------------=_1521571391-31396-342
Content-Type: text/html; charset="UTF-8"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

<html><body>
<h3>Evgheni Dereveanchin created OVIRT-1940:</h3>
<pre>   Summary: Do not show injected variables in Jenklins
       Key: OVIRT-1940
       URL: https://ovirt-jira.atlassian.net/browse/OVIRT-1940
   Project: oVirt - virtualization made easy
Issue Type: Task
  Reporter: Evgheni Dereveanchin
  Assignee: infra</pre>
<p>We use the Environment Injector Plugin and a recent security advisory for Jenkins
recommends disabling display of injected variables via the UI/API to avoid leakage of
sensitive data: <a
href="https://jenkins.io/security/advisory/2018-02-26/#SECURITY-248">https://jenkins.io/security/advisory/2018-02-26/#SECURITY-248</a></p>
<p>This can be done in settings -&gt; Configure Global Security -&gt; Do not
show injected variables</p>
<p>I performed this change on staging already.</p>
<p>&mdash; This message was sent by Atlassian Jira
(v1001.0.0-SNAPSHOT#100082)</p>

------------=_1521571391-31396-342--

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

[JIRA] (OVIRT-1940) Do not show injected variables in Jenklins