Cicd

Jenkins Credential Store Files

Jenkins credential store files and secrets directories can contain encrypted credentials and key material used by a Jenkins controller.

Metadata

id: cicd.jenkins.credentials
category: cicd
sensitivity: critical
subcategory: jenkins
artifact types: credential, configuration
tags: jenkins, cicd

Path Matchers

Path	Kind	Platforms
`$JENKINS_HOME/credentials.xml`	`file`	`linux`, `macos`
`$JENKINS_HOME/secrets/`	`directory`	`linux`, `macos`
`%PROGRAMDATA%\Jenkins\.jenkins\credentials.xml`	`file`	`windows`

Credential Types

password
private-key
access-token

Impact

credential_access
lateral_movement

References

GitLab CI Configuration

GitLab CI configuration files can reveal build logic, deployment commands, runner behavior, and secret references.

Jenkinsfile Pipeline Configuration

Jenkinsfile pipeline definitions can reveal build stages, deployment logic, credential bindings, and secret references.

On this page

Metadata Path Matchers Credential Types Impact References