Log file of Visual Studio buildtools reveals all plan variables even the "secret" ones!!!

[farhad0987654321]

Hi,

I am trying to build my test database project using Bamboo and Visual Studio 2022 Build Tools. I want to generate a log file containing build logs.

My build script is something like below:

"C:\Program Files (x86)\Microsoft Visual Studio\2022\BuildTools\MSBuild\Current\Bin\MSBuild.exe" ^
C:\bamboo-home\local-working-dir\P1-PL1-BDJ\DbSource\Database3.sln /maxCpuCount /t:Rebuild /p:Configuration=Release /fileLogger1 /fileLoggerParameters1:LogFile=C:\bamboo-home\local-working-dir\P1-PL1-BDJ\DbSource\MSBuildLog.txt;Append;Verbosity=diagnostic;Encoding=UTF-8

After the execution, the generated MSBuildLog.txt contains all plan variables' value unencrypted! They are even not used for this build task.

 

Why is this happening? How can I prevent these irrelevant information from being logged?

Thanks 

[Alexey Chystoprudov · Accepted solution]

Bamboo makes all variables available for executed commands and scripts so user could use them during build process. It has logic to hide them at build logs, but have no control over other apps. It's by design

[farhad0987654321]

Sure, but these variables have no use here and do not exists or placed in the executing script. I don't know why they are there as the task don't use them.

[Eduardo Alvarenga]

Hello @farhad0987654321, these are either Plan, Project or Global variables. Check the following documentation:

• Defining custom variables

Eduardo Alvarenga
Atlassian Support APAC

[farhad0987654321]

Thank you guys, @Eduardo Alvarenga and @Alexey Chystoprudov

I solved it. I know about Bamboo variables, but I wrongly configured the MSBuild logger in diagnostic mode which logs out all variables.