Earlier this week the Jenkins infrastructure team identified a successful attack against our deprecated Confluence service. We responded immediately by taking the affected server offline while we investigated the potential impact. At this time we have no reason to believe that any Jenkins releases, plugins, or source code have been affected. Thus far in our investigation, we have learned that the Confluence CVE-2021-26084 exploit was used to...

This blog post is part 2 of the Introducing the Conventional Commits Plugin blog. The goal of this blog is to showcase the work done during the Google Summer of Code 2021 coding phases. Please refer the part 1 of the blog for a detailed description of the plugin. Abstract The project/plugin aims to fully automate a release process. The plugin tries to achieve this goal by automatically determining...

Background Jenkins custom resources on a Kubernetes cluster are deployed using declarative YAML configuration files; hence some of the plugins declared in these files may contain security warnings. So there is no way for the user to know other than manually checking for each on the site. This project aims to add an extra step of validation before creating/updating a new Jenkins Custom Resource. Deliverables This project aims to...

Abstract This project implemented two new credential bindings to perform authenticated operations using command line git in Jenkins pipeline and freestyle jobs. The two credential bindings are gitSshPrivateKey and gitUsernamePassword. Implementation Type Feature Location The gitUsernamePassword binding is implemented in Jenkins git plugin v4.8.0. The gitSshPrivateKey binding is implemented in a pull request to the Jenkins git plugin Dependencies Credentials Binding Plugin- It is used to bind Git specific environment variables with shell scripts/commands which...

The Jenkins project provides Docker images for controllers, inbound agents, outbound agents, and more. Beginning with Jenkins 2.307 released August 17, 2021 and Jenkins 2.303.1 released August 25, 2021, the Docker images provided by the Jenkins project will use Java 11 instead of Java 8. Controllers use Java 11 by default If you are running one of the Jenkins Docker controller images that does not include a...

The What, Why and How of Interoperability With workloads and teams becoming more diverse and complex, there is an increasing need to automate various tasks in the CI/CD ecosystem of an application as a way to decrease complexity that can come with CI/CD. A more diverse team working across different aspects of the application requires a diverse suite of CI/CD tools too, to test and deliver...

Goal The goal of this project: collect telemetry data(metrics, traces, logs) of remoting module with OpenTelemetry. send the telemetry data to OpenTelemetry Protocol endpoint Which OpenTelemetry endpoint to use and how to visualize the data are up to users. OpenTelemetry An observability framework for cloud-native software OpenTelemetry is a collection of tools, APIs, and SDKs. You can use it to instrument, generate, collect, and export telemetry data(metrics, logs, and traces) for analysis in order to...

The conventional commits plugin is a Google Summer of Code project. Special thanks to the mentors Gareth Evans, Kristin Whetstone, Olivier Vernin and Allan Burdajewicz. What are Conventional Commits According to the official website, conventonal commits are, "A specification for adding human and machine readable meaning to commit messages." Conventional commits are a lightweight convention on top of commit messages. The following table shows major structural elements offered by...