Back of the Napkin Guide to Updating Jenkins, for the uninitiated

. Prologue Here’s a brief account of my journey to update my Jenkins Servers. Think of this as a “back of the napkin” guide that I used to research and upgrade my Jenkins Servers, which had been left unattended for far too long. I know many of you are seasoned experts – I wasn’t. I’ve Read more about Back of the Napkin Guide to Updating Jenkins, for the uninitiated[…]

What is the plugin health score?

Short story long As of October 24th, there is a new tab named Health Score on each plugin page of plugins.jenkins.io. This new tab provides the plugin’s health score, along with every aspect that contributed to its score. The score is meant to be unbiased and all plugins are evaluated the same way. Here is Read more about What is the plugin health score?[…]

GSoC GitLab Plugin Modernization Project

The goal of this blog is to showcase the work done on GitLab Plugin during the Google Summer of Code 2023. For a detailed description of the project, please refer to the project page. Overview About Project Coding Phase 1 Coding Phase 2 Future Improvements Acknowledgments Useful Links About Project Plugins grow old and become Read more about GSoC GitLab Plugin Modernization Project[…]

Summer Internship in Jenkins security

Context Jenkins is an open-source CI/CD solution that is extensible with a wide range of plugins that can be installed using the Jenkins plugin distribution repository or via manual installation. This extensibility is a powerful feature of Jenkins, but it is a critical aspect that has to be secured to avoid risks and vulnerabilities that Read more about Summer Internship in Jenkins security[…]

Introducing Harsh Pratap Singh as the GSoC 2023 Contributor working on GitLab Plugin Modernization

This is Harsh Pratap Singh, an Open source enthusiast, who is currently in his freshman year exploring different technologies related to DevSecOps and Blockchain. I am curious and passionate about automation thus Jenkins is my goto Open Source organization for Google Summer of Code. This is my first time contributing to Open Source and I Read more about Introducing Harsh Pratap Singh as the GSoC 2023 Contributor working on GitLab Plugin Modernization[…]

Creating custom Event-Driven Ansible source plugins

  We’re surrounded! Our modern systems and applications are constantly generating events. These events could be generated by service requests, application events, health checks, etc. With the wealth of information from event traffic surrounding everything we do, Event-Driven Ansible allows for automated responses to incoming events. But not only are we completely engulfed in event Read more about Creating custom Event-Driven Ansible source plugins[…]

Plugin Health Scoring System

The goal of this blog is to showcase the work done during the Google Summer of Code 2022 coding phases. For a detailed description of the project, please see the project page. Overview About Project Phase 1 Phase 2 Next Steps Acknowledgments Useful Links About Project Plugin maintenance is an extremely important phase of a Read more about Plugin Health Scoring System[…]

Security Validator for Jenkins Operator for Kubernetes

Background Jenkins custom resources on a Kubernetes cluster are deployed using declarative YAML configuration files; hence some of the plugins declared in these files may contain security warnings. So there is no way for the user to know other than manually checking for each on the site. This project aims to add an extra step Read more about Security Validator for Jenkins Operator for Kubernetes[…]

Four students and their master project in Jenkins security

Context Jenkins is a CI/CD solution and as such, it is critical that the open source plugins that constitute an integral part of it don’t expose the systems they are used on to any security risks and vulnerabilities. It is in that context that we worked as an audit/code review team to track and report Read more about Four students and their master project in Jenkins security[…]