Hi, thanks for the tutorial. What I don't get is what are the benefits of this approach? If someone has access to your settings xml file, wouldn't they also have access to your security-settings.xml? Both are in .m2 according to your tutorial.
the location for settings.xml and security-settings.xml is by default your home directory ($HOME/.m2/) which is by default secured by your login (username/password). This is the first barrier and the second one of course is, as Scott wrote is that in none of them is a clear text password.
Karl Heinz Marbaise
With this approach, neither the settings.xml nor the security-settings.xml have a clear-text password. Both of the strings inside them are encrypted, and the actual passwords are known only to the user.
Ah, ok. So you are prompted for the master password when you try to get a dependency from your repo?
We're a place where coders share, stay up-to-date and grow their careers.
We strive for transparency and don't collect excess data.