repos variable appears after setting and can see it even it's secured.

Tùng Lê
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
January 10, 2025

I have a problem inputting the Repository Variable. After I enter the AWS credentials, and refresh the page, then the variable that i have just entered earlier appears again on the Add field, i can uncheck the secured option and see the value, it's quite dangerous:
image.png

2 answers

1 vote
Sahir Maharaj
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
January 11, 2025

Hello @Tùng Lê

This behavior could be due to a configuration or UI caching issue. If a secured variable is visible after refreshing, it’s a potential security concern.  Ensure you’re saving changes correctly after marking the variable as secured.

 

0 votes
Theodora Boudale
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
January 14, 2025

Hi @Tùng Lê and welcome to the community!

I cannot reproduce the issue you are reporting with all supported browsers for Bitbucket Cloud. Can you please let me know the following:

  1. What browser are you using and what is the version of this browser?

  2. Can you reproduce the issue if you clear cookies and cache for bitbucket.org?

  3. Can you reproduce the issue in an Incognito / Private window of a supported browser with all add-ons disabled?

    Supported browsers are listed on this page:

    https://confluence.atlassian.com/bbkb/which-web-browsers-does-bitbucket-support-1168845119.html

Please keep in mind that even when you add a new variable, if you enter a variable name and a value you can always uncheck the Secured option if you haven't selected Add yet.

Kind regards,
Theodora

Suggest an answer

Log in or Sign up to answer
DEPLOYMENT TYPE
CLOUD
PERMISSIONS LEVEL
Product Admin Site Admin
TAGS
AUG Leaders

Atlassian Community Events