Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Tokens and password stored in plaintext! #121

Open
cowlinator opened this issue May 23, 2024 · 0 comments
Open

Tokens and password stored in plaintext! #121

cowlinator opened this issue May 23, 2024 · 0 comments
Labels

Comments

@cowlinator
Copy link

cowlinator commented May 23, 2024

Jenkins and plugins versions report

Environment
OS: Linux - 4.15.0-225-generic
Java: 21.0.3 - Eclipse Adoptium (OpenJDK 64-Bit Server VM)
---

What Operating System are you using (both controller, and any agents involved in the problem)?

Ubuntu

Reproduction steps

  1. Go to https://plugins.jenkins.io/github-pr-coverage-status/
  2. Read the security error

Optional:
3. Open com.github.terma.jenkins.githubprcoveragestatus.Configuration.xml
4. Note that your personal access token is indeed stored in plaintext

Expected Results

My precious secrets to be encrypted and not stored in plaintext

Actual Results

My precious secrets were stored in plaintext

Anything else?

This deserves it's own patch. This is critically important.

Are you interested in contributing a fix?

No response

@cowlinator cowlinator added the bug label May 23, 2024
@cowlinator cowlinator changed the title Tokens and password stored in plain text Tokens and password stored in plaintext! May 23, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant