ctron / package-drone-jenkins

A Package Drone Plugin for Jenkins
3 stars 4 forks source link

Support deploy key as credentials stored in Jenkins #23

Closed nfalco79 closed 6 years ago

nfalco79 commented 6 years ago

Add support to this plugin to use Jenkins configured credentials instead plain text deploy key or global variable (if possible).

This increase security, and let admin easy change deploy key without edit all configured jobs.

The password defined with a $VARIABLE is not supported everywhere. For example package-drone as step of the promotion plugin the variable substitution does not works using global password or if the variable is defined in the job configuration section.

A lot of plugins are adopting the credential plugin to manage any secret text (password, api key, SSH key and so on). https://jenkins.io/security/advisories/