如何让groovy on Jenkins屏蔽变量的输出，就像屏蔽凭证一样？

Question

在groovy on Jenkins中，有没有一种方法可以接受任意字符串变量--比如对另一个服务的API调用的结果--并让Jenkins在控制台输出中屏蔽它，就像它对从Credentials Manager读取的值所做的那样？

Answer 1

更新解决方案:要隐藏变量的输出，可以使用Mask Password插件

下面是一个例子：

String myPassword = 'toto'
node {
  println "my password is displayed: ${myPassword}"
  wrap([$class: 'MaskPasswordsBuildWrapper', varPasswordPairs: [[password: "${myPassword}", var: 'PASSWORD']]]) {
   println "my password is hidden by stars: ${myPassword}"
   sh 'echo "my password wont display: ${myPassword}"'
   sh "echo ${myPassword} > iCanUseHiddenPassword.txt"
  }
  // password was indeed saved into txt file
  sh 'cat iCanUseHiddenPassword.txt'
}

https://wiki.jenkins.io/display/JENKINS/Mask+Passwords+Plugin

使用正则表达式解决方案的原始答案：

假设您想隐藏包含在引号之间的密码，下面的代码将输出My password is "****"

import java.util.regex.Pattern

String myInput = 'My password is "password1"'

def regex = Pattern.compile( /(?<=\")[a-z0-9]+(?=\")/, Pattern.DOTALL);

def matchList = myInput =~ regex

matchList.each { m ->
  myInput = myInput.replaceAll( m, '****')
}
println myInput

您需要将a-z0-9替换为密码中允许的字符模式