On: Mind your Logs: How a build log from a Jenkins leaked everything

[nineteen999]

Also, there's a Jenkins Mask Passwords plugin which we use in conjunction with not exposing our Jenkins server to the Internet. Plus its worthwhile wrapping Jenkins with TLS.

https://wiki.jenkins.io/display/JENKINS/Mask+Passwords+Plugi...

[brazzy → nineteen999]

The article specifically mentions that the Jenkins in question had this plugin active, but it failed to catch all sensitive secrets.