Decrypted password shown when using ARA GIT Hub Action Pack

Document ID : KB000084546
Last Modified Date : 14/04/2018
Show Technical Document Details
Issue:
Error Message :
N/A

When using GIT Hub Action Package, if a authentication fails,  the password is shown in the report as plain text. An example of the password shown as below
"PARAM: Remote Repository Name = ARA-STG"
"PARAM: Local Repository Name = "
"PARAM: Server URI = https://gitlab-stg.automic.com/GTS-CTO-ARA/"
"PARAM: Working copy Directory = d:\temp\jagdish"
"PARAM: Additional Options = "
"INFO: d:\temp\jagdish is checked for being a dir/file and if it exist"
Cloning into 'ARA-STG'...
remote: HTTP Basic: Access denied
fatal: Authentication failed for 'https://gidwanj:XXXXXXX@gitlab-stg.automic.com/GTS-CTO-ARA/ARA-STG.git/'







 
Environment:
OS: Windows
OS Version: N/A
Cause:
Cause type:
Defect
Root Cause: Package.GIT 1.0.3
Resolution:
Update to a fix version listed below or a newer version if available.

Fix Status: Released

Fix Version(s):
Package GIT 1.0.3 - Available
Additional Information:
Workaround :
Instead of using http, use Git Action with SSH without username and password.
https://help.github.com/articles/connecting-to-github-with-ssh/