Background Jenkins custom resources on a Kubernetes cluster are deployed using declarative YAML configuration files; hence some of the plugins declared in these files may contain security warnings. So there is no way for the user to know other than manually checking for each on the site. This project aims to add an extra step of validation before creating/updating a new Jenkins Custom Resource. Deliverables This project aims to...

Context Jenkins is a CI/CD solution and as such, it is critical that the open source plugins that constitute an integral part of it don’t expose the systems they are used on to any security risks and vulnerabilities. It is in that context that we worked as an audit/code review team to track and report such flaws and problematic practices. We worked in collaboration with Jenkins Security...

This blog post is for anyone interested to know how to configure a plugin using the Jenkins Configuration as a Code (JCasC) plugin, more specifically, this blog will guide you to get the YAML equivalent of a plugin’s configuration and use it to do some changes to the plugin without using the Jenkins UI. If you’re a beginner at JCasC and want to learn more...

This blog post is about our phase 3 progress on GitHub Checks API Project, you can find our previous blog posts for phase 1 and phase 2. At the end of this summer, the GSoC journey for GitHub Checks API Project comes to an end as well. In this blog post, I’ll show you our works during the last month: Pipeline Support Rerun Request Support Git SCM Support Documentation All the...

Since the beginning of the project, the core value which drove its progress was "To enhance the user experience for running Jenkins jobs by reducing the overall execution time". To achieve this goal, we laid out a path: Compare the two existing git implementations i.e CliGitAPIImpl and JGitAPIImpl using performance benchmarking Use the results to create a feature which would improve the overall performance of git plugin Also,...

Good to see you all again ! This is my final blog post about coding phase 3 in Jenkins Machine Learning Plugin for GSoC 2020. Being at the end of GSoC 2020, we had to finish all the pending issues and testing before a stable release in the main repository. Throughout this program, there were lots of learning and hard work will make this plugin valuable...

The final phase for the External Fingerprint Storage Project has come to an end and to finish off, we release one more fingerprint storage plugin: the PostgreSQL Fingerprint Storage Plugin! This post highlights the progress made during phase-3. To understand what the project is about and the past progress, please refer to the phase-1 post and the phase-2 post. Introducing the PostgreSQL Fingerprint Storage Plugin Why PostgreSQL? There were several reasons why it...

Another great coding phase for GitHub Checks API Project ends! In this phase, we focused on consuming the checks API in two widely used plugins: Warnings NG Plugin Code Coverage API Plugin Besides the external usage, we have also split the general checks API from its GitHub implementation and released both of the plugins: Checks API Plugin GitHub Checks Plugin Coding Phase 2 Demo [starts from 25:20] Warning Checks The newly released Warnings...

The second phase of the Git Plugin Performance Improvement project has been great in terms of the progress we have achieved in implementing performance improvement insights derived from the phase one JMH micro-benchmark experiments. What we’ve learned so far in this project is that a git fetch is highly correlated to the size of the remote repository. In order to make fetch improvements in this plugin,...

Welcome back folks! This blog post is about my coding phase 2 in Jenkins Machine Learning Plugin for this GSoC 2020. After successfully passing the evaluation and demo in the phase 1, our team went ahead for facing the challenges in phase 2. Summary This phase of coding was well spent by documentation and by fixing many bugs. As the main feature of connecting to an IPython Kernel is...