Repository passwords displayed in the event log during fetch errors

Continua CI Bugs
1

One of our repositories was unable to fetch new changes and put a message in our event log. The message contains our Git credentails in plain text. These event logs should have the Git passwords redacted so users cannot learn them by reading the event log.

The event log message was the following:

[Repository] Repository 
Repository 'IntegrationFramework' (1ce22928-9d27-4239-8bcc-c6ae58fa256d) cannot be initialised: Running git.exe with arguments "clone https://[USERNAME_IS_HERE]:[PASSWORD_IS_HERE]@bitbucket.org/....
2

Hi Stephen,

Thanks for pointing this out. We usually blank out passwords when displaying arguments in these log messages but had missed the one in this url. This will be fixed for the next build.