Re: M2 Release Plugin - mask scm password issue

2015-04-09 Thread Andreas
I did so: JENKINS-27869 . Am Donnerstag, 9. April 2015 12:41:47 UTC+2 schrieb James Nord: > > Can you file an RFE on the issue tracker for the m2release plugin. > You shouldn't need to jump through hoops for this to work. > > On Monday, March 30

Re: M2 Release Plugin - mask scm password issue

2015-04-09 Thread James Nord
Can you file an RFE on the issue tracker for the m2release plugin. You shouldn't need to jump through hoops for this to work. On Monday, March 30, 2015 at 10:17:11 PM UTC+1, Andreas wrote: > > Eric, thanks for the hint. > > Nevertheless, the masking just works if I also expose the password as "SC

Re: M2 Release Plugin - mask scm password issue

2015-03-30 Thread Andreas
Eric, thanks for the hint. Nevertheless, the masking just works if I also expose the password as "SCM password environment variable", for both EnvInject and Mask Password plugin. Kind Regards, Andreas. Am Montag, 30. März 2015 22:06:25 UTC+2 schrieb eric...@rocketmail.com: > > try using the ma

Re: M2 Release Plugin - mask scm password issue

2015-03-30 Thread Eric Wood
try using the masked password plugin.  On Monday, March 30, 2015 12:00 PM, Andreas wrote: Me again My current workaround is to additionally expose the password to the environment by setting "SCM password environment variable" in the advanced options of the m2release plugin.

Re: M2 Release Plugin - mask scm password issue

2015-03-30 Thread Andreas
Me again My current workaround is to additionally expose the password to the environment by setting "SCM password environment variable" in the advanced options of the m2release plugin. In this case the password is also stored as PasswordParameterValue and thus detected as to be masked by th

M2 Release Plugin - mask scm password issue

2015-03-30 Thread Andreas
Hi, I've a issue with password disclosure when using the M2 Release Plugin and entering the password. During the release build the SCM Password is passed to a child maven instance and unfortunately dumped in plain text (not masked) to the log output. I would expect that this password is masked