title: How to secure credentials on a buildserver?
body: <p>I got a setup where the developers push code to a repository, which then triggers a build on our CI Server. The deployment is currently also done by CI server. For deployment to the production environment, jenkins needs to login as root on the prod-servers.</p>
  
  <p>That means that I have to put the credentials (e.g. username / password or secret key) onto the CI system. This leads to the problem that every developer that has access to the repository, is able to read these secret credentials by injecting code into the build process.</p>
  
  <p>How can I make sure that access to the repo doesn't give potential access to the credentials on my CI server?</p>