I have created a Build Runner Plugin which calls a process with command-line parameters specified as part of the Plugin's UI.
The problem is that one of these parameters is a password, and this whole process call (complete with parameters) is appearing in the logs.
I wish to be able to continue to show the command that is being called (there are other parameters useful for troubleshooting), however, I need to be able to redact the password string.
I have three ideas right now:
1) I could set an environment variable with my password and read that in my process as an alternative to the command line (this seems pretty hacky, but doable, to me)
2) I could *maybe* make use of the TeamCity password type build parameters, which TC automatically redacts from the logs (not idea how to do this though!)
3) I could create my own implementation of the BuildProgressLogger that redacts the password (except I can't see how to provide one of these!)
Does anyone have any ideas/pointers for me please?