We used to use -Dartifactory_user=... in the Gradle task, and inject the password 'artifactory_password' as environment variables and it worked fine with plugin 2.2.7.
After upgrade to 2.4.7, this does not work any more. We have to use "overwrite credential" for resolve and deployment (as the global credential does not meet the need of every teams).
It would be good to keep the consistent behavior of using the environment variables as credential if they exist, and the "overwrite credential" is not clicked.
Other issue: after using "overwrite credential" every where, the repo list can not be refreshed with the correct credential. It looks like always using the credential from global config, where the user does not have read access to all repos.
For me, the repo list shall be retrieved using the credential set in "overwirte credential" if they are set, instead of using the global one.