SonarQube Token (Dsonar.login) displayed in ClearText in Build Log: Teamcity Integration

SonarQube Server / Community Build
1

SonarQube Server 10.4.1.88267 : Deployed in Ubuntu 22.04 LTS through Docker Compose
Sonar Runner installed in Teamcity through (https://github.com/JetBrains/TeamCity.SonarQubePlugin) Version 2020.1-11

Hi all,

I have successfully implemented sonarqube community with the build pipelines in TeamCity. The problem is that I can see the sonarqube token in cleartext in the Build Log.

Is there any way I can remove it from build log?

Thanks.

2

Hey there.

This plugin is actually maintained by JetBrains, so you’ll want to raise an issue with them: Issues · JetBrains/TeamCity.SonarQubePlugin · GitHub

1 Like