[JIRA] (OVIRT-1940) Do not show injected variables in Jenklins

20 Mar 2018

      This is a multi-part message in MIME format...

------------=_1521571391-31396-342
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

Evgheni Dereveanchin created OVIRT-1940:
-------------------------------------------

             Summary: Do not show injected variables in Jenklins
                 Key: OVIRT-1940
                 URL: https://ovirt-jira.atlassian.net/browse/OVIRT-1940
             Project: oVirt - virtualization made easy
          Issue Type: Task
            Reporter: Evgheni Dereveanchin
            Assignee: infra

We use the Environment Injector Plugin and a recent security advisory for Jenkins recommends disabling display of injected variables via the UI/API to avoid leakage of sensitive data:
https://jenkins.io/security/advisory/2018-02-26/#SECURITY-248

This can be done in settings -> Configure Global Security -> Do not show injected variables

I performed this change on staging already.

--
This message was sent by Atlassian Jira
(v1001.0.0-SNAPSHOT#100082)

------------=_1521571391-31396-342
Content-Type: text/html; charset="UTF-8"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

<html><body>
<h3>Evgheni Dereveanchin created OVIRT-1940:</h3>
<pre>   Summary: Do not show injected variables in Jenklins
       Key: OVIRT-1940
       URL: https://ovirt-jira.atlassian.net/browse/OVIRT-1940
   Project: oVirt - virtualization made easy
Issue Type: Task
  Reporter: Evgheni Dereveanchin
  Assignee: infra</pre>
<p>We use the Environment Injector Plugin and a recent security advisory for Jenkins recommends disabling display of injected variables via the UI/API to avoid leakage of sensitive data: <a href="https://jenkins.io/security/advisory/2018-02-26/#SECURITY-248">https://jenkins.io/security/advisory/2018-02-26/#SECURITY-248</a></p>
<p>This can be done in settings -> Configure Global Security -> Do not show injected variables</p>
<p>I performed this change on staging already.</p>
<p>— This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100082)</p>

<img src="https://u4043402.ct.sendgrid.net/wf/open?upn=i5TMWGV99amJbNxJpSp2-2BJ33BSM3t..." alt="" width="1" height="1" border="0" style="height:1px !important;width:1px !important;border-width:0 !important;margin-top:0 !important;margin-bottom:0 !important;margin-right:0 !important;margin-left:0 !important;padding-top:0 !important;padding-bottom:0 !important;padding-right:0 !important;padding-left:0 !important;"/>
</body></html>

------------=_1521571391-31396-342--

Evgheni Dereveanchin (oVirt JIRA)

tags

participants (1)