Return-Path: X-Original-To: apmail-maven-issues-archive@minotaur.apache.org Delivered-To: apmail-maven-issues-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id E21FC18FF2 for ; Mon, 3 Aug 2015 11:03:04 +0000 (UTC) Received: (qmail 46882 invoked by uid 500); 3 Aug 2015 11:03:04 -0000 Delivered-To: apmail-maven-issues-archive@maven.apache.org Received: (qmail 46823 invoked by uid 500); 3 Aug 2015 11:03:04 -0000 Mailing-List: contact issues-help@maven.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@maven.apache.org Delivered-To: mailing list issues@maven.apache.org Received: (qmail 46808 invoked by uid 99); 3 Aug 2015 11:03:04 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 03 Aug 2015 11:03:04 +0000 Date: Mon, 3 Aug 2015 11:03:04 +0000 (UTC) From: =?utf-8?Q?Ludovic_Leb=C3=A8gue_=28JIRA=29?= To: issues@maven.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Comment Edited] (SCM-764) username and credentials shown as INFO on commadline MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/SCM-764?page=3Dcom.atlassian.ji= ra.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=3D1458157= 7#comment-14581577 ]=20 Ludovic Leb=C3=A8gue edited comment on SCM-764 at 8/3/15 11:02 AM: -------------------------------------------------------------- An upgrade of maven-release-plugin to 2.5.2 solved the issue for me was (Author: llebegue): It's still visible even for git command > username and credentials shown as INFO on commadline > ---------------------------------------------------- > > Key: SCM-764 > URL: https://issues.apache.org/jira/browse/SCM-764 > Project: Maven SCM > Issue Type: Bug > Components: maven-scm-provider-git > Environment: Apache Maven 3.2.1 (ea8b2b07643dbb1b84b6d16e1f08391b= 666bc1e9; 2014-02-14T18:37:52+01:00) > Maven home: D:\Dev\maven\apache-maven-3.2.1 > Java version: 1.7.0_51, vendor: Oracle Corporation > Java home: D:\Dev\Java\jdk7_51_x64\jre > Default locale: de_DE, platform encoding: Cp1252 > OS name: "windows 7", version: "6.1", arch: "amd64", family: "windows" > Reporter: Thomas Wabner > Assignee: Olivier Lamy (*$^=C2=A8%`=C2=A3) > Fix For: 1.9.4 > > > Using git repository with gitblit on HTTPS. > Every git command which involve the remote repository (like fetch, pull, = push and so on) showing the username and credentials on the commandline lik= e this: > [INFO] Executing: cmd.exe /X /C "git push https://user:secret@devserver/g= itblit//r/waffel/devopts.git test-branch" > It should be avoided to ever print out passwords on the command line. I h= ave encrypted the password in maven settings.xml ... but now it comes back = and anybody can see them (also on a continues build server which should pus= h with a dedicated user to a central repo). -- This message was sent by Atlassian JIRA (v6.3.4#6332)