Using https://username:password@mygitserver.com will expose the credentials e.g. in 'ps' when users have SSH access to the server which also runs Bamboo.
This can be avoided if Bamboo uses git-credential-store.