Any sub process of bamboo is run under the account of the bamboo agent. If a user is using the script task he has the same permissions and can:
a) inspect the folders of other build jobs
b) inspect the environment variables of other build jobs and find sensitive details like passwords or tokens
Is there any way to prevent that?
Just the FAQs! Welcome to the Community, and this Focused-FAQ! Here, we've pulled together some of the most frequently asked questions associated with Jira Service Desk (JSD). We hope ...
Connect with like-minded Atlassian users at free events near you!Find a group
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no AUG chapters near you at the moment.Start an AUG
You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs