jenkins/config/credentials.xml

<?xml version='1.0' encoding='UTF-8'?>
<com.cloudbees.plugins.credentials.SystemCredentialsProvider>
  <domainCredentialsMap class="hudson.util.CopyOnWriteMap$Hash">
    <entry>
      <com.cloudbees.plugins.credentials.domains.Domain>
        <specifications/>
      </com.cloudbees.plugins.credentials.domains.Domain>
      <java.util.concurrent.CopyOnWriteArrayList>
        <com.cloudbees.plugins.credentials.impl.UsernamePasswordCredentialsImpl>
          <scope>GLOBAL</scope>
          <id>3b53d1b7-9c6b-4822-b2d0-82022ade718f</id>
          <description>bazel-io @ github</description>
          <username>bazel-io</username>
          <password>##SECRET:github.bazel-io.jenkins.password##</password>
        </com.cloudbees.plugins.credentials.impl.UsernamePasswordCredentialsImpl>
        <hudson.plugins.sauce_ondemand.credentials.SauceCredentials>
          <scope>GLOBAL</scope>
          <id>61b4846b-279d-4369-ae20-31e9d8b9bc66</id>
          <description>bazel_rules_webtesting @ Sauce Labs</description>
          <username>bazel_rules_webtesting</username>
          <apiKey>##SECRET:saucelabs.bazel_rules_webtesting.access_key##</apiKey>
        </hudson.plugins.sauce_ondemand.credentials.SauceCredentials>
      </java.util.concurrent.CopyOnWriteArrayList>
    </entry>
  </domainCredentialsMap>
</com.cloudbees.plugins.credentials.SystemCredentialsProvider>