···

       
165
       
165
       
 
       
            jenkins_url="http://${jenkinsCfg.listenAddress}:${toString jenkinsCfg.port}${jenkinsCfg.prefix}"

     

       
166
       
166
       
 
       
            auth_file="$RUNTIME_DIRECTORY/jenkins_auth_file.txt"

     

       
167
       
167
       
 
       
            trap 'rm -f "$auth_file"' EXIT

     

       
168
       
168
       
-
       
            printf "${cfg.accessUser}:@password_placeholder@" >"$auth_file"

     

       
168
       
168
       
+
       
            (umask 0077; printf "${cfg.accessUser}:@password_placeholder@" >"$auth_file")

     

       
169
       
169
       
 
       
            "${pkgs.replace-secret}/bin/replace-secret" "@password_placeholder@" "$access_token_file" "$auth_file"

     

       
170
       
170
       
 
       


     

       
171
       
171
       
 
       
            if ! "${pkgs.jenkins}/bin/jenkins-cli" -s "$jenkins_url" -auth "@$auth_file" reload-configuration; then