search

JetBrains / TeamCity.SonarQubePlugin

A plugin for TeamCity server allowing you to configure and run SonarQube analysis from the CI
Apache License 2.0
53 stars 32 forks source link

SonarQube Token (Dsonar.login) displayed in Cleartext in Build log: Teamcity Integration with SonarQube #105

Open suchant opened 1 month ago

suchant commented 1 month ago

SonarQube Server 10.4.1.88267 : Deployed in Ubuntu 22.04 LTS through Docker Compose Sonar Runner installed in TeamCity through (https://github.com/JetBrains/TeamCity.SonarQubePlugin) Version 2020.1-11

TeamCity Version: TeamCity Enterprise 2024.03.1 (build 156270)

Hi all,

I have implemented SonarQube community with the build pipelines in TeamCity. The problem is that I can see the SonarQube token in cleartext in the build log.

Is there any way I can remove it from the build log or mask it somehow?

Thanks.