The Jenkins Blog

healthscore

Incremental Build Detection Probe

Introduction The Incremental Build Detection Probe was developed as a part of Google Summer of Code 2023 for the plugin health scoring system project. Incremental builds aid in continuous delivery of plugins, deploying only the modules affected by new commits [1]. Jenkins core and plugins can be deployed incrementally, rather than waiting for the developer to manually deploy the release [2]. This probe identifies...

Jagruti Tiwari September 22, 2023
Renovate Probe

Introduction Bots are used to automate tasks in a plugin. The Plugin Health Scoring System tracks usage of two bots - Dependabot and Renovate. Dependabot looks for dependencies that are outdated in a plugin. It can also raise a security alert if a security breach is found, like when the code depends on an insecure package. Renovate provides automated dependency updates. It can also schedule PRs...

Jagruti Tiwari September 20, 2023
Detecting deprecated JSR-305 imports Probe

Introduction This blog post describes the latest addition to the plugin health scoring system developed as part of my Google summer of Code Project: a probe that detects usages of the JSR-305 framework in plugins. The JSR-305 framework provides annotations to detect software defects. Its executive committee voted it as dormant since May 2012. It is important to stop using the framework for the...

Jagruti Tiwari September 9, 2023
Number of Open Issues Probe

Introduction An alarming number of issues in a plugin may signify that the plugin is outdated, in need of a new maintainer, or in need of a complete revamp. Open issues might also mean that there are a lot of new feature requests, which in turn means the plugin has quite a number of active users. The number of open issue probe counts...

Jagruti Tiwari August 28, 2023
Third Party Repository Detection Probe

Introduction A third-party repository is a repository that is not hosted at https://repo.jenkins-ci.org/. The Jenkins Infra team was concerned about the dependencies used by third-party repositories. These repositories are a concern, not just for security reasons, but also for reliability. The third-party repository detection probe ensures that plugins are built only from trusted and reliable Maven repositories. Importance of the probe This probe was requested by...

Jagruti Tiwari July 20, 2023
Unreleased Production Changes Probe

Introduction A bug fix, security fix, or new features are of no use unless they are released. A production release not only provides users with an updated plugin, but also gives the developers a chance to get feedback on their work. The "unreleased production changes" probe looks for unreleased commits in the production files. If an unreleased file is found in the production path,...

Jagruti Tiwari July 16, 2023
Security Scan Probe

Introduction The Jenkins Security team offers a GitHub action that automatically scans the plugin source code during Continuous Integration and reports security issues. The Jenkins community considers using such tools to ensure a high-security level for plugins as a good practice. The Security Scan probe identifies whether the plugin is configured to execute the security action. Importance of the Probe This probe is essential from...

Jagruti Tiwari July 16, 2023
Introducing Jagruti Tiwari as the GSoC 2023 Contributor Working on Adding Probes to Plugin Health Scoring System

Background I started contributing to open-source projects in Jan 2022. I tried setting up well-known projects like Django, Brave browser, and Chromium but failed miserably. I didn’t know that open source is not about projects but about community. Gradually I stumbled upon freeCodeCamp. That’s where I wrote my first test case and fixed minor bugs. I gained the confidence to continue...

Jagruti Tiwari May 22, 2023
Plugin Health Scoring System

The goal of this blog is to showcase the work done during the Google Summer of Code 2022 coding phases. For a detailed description of the project, please see the project page. Overview About Project Phase 1 Phase 2 Next Steps Acknowledgments Useful Links About Project Plugin maintenance is an extremely important phase of a plugin’s lifecycle. Jenkins is constantly developing, which raises the need for thousands of plugins to catch...

Dheeraj Singh Jodha October 10, 2022