The Jenkins Blog

plugins

Back of the Napkin Guide to Updating Jenkins, for the uninitiated

. Prologue Here’s a brief account of my journey to update my Jenkins Servers. Think of this as a "back of the napkin" guide that I used to research and upgrade my Jenkins Servers, which had been left unattended for far too long. I know many of you are seasoned experts - I wasn’t. I’ve included references that I found useful in my research, but...

Marc Phillips October 31, 2023
What is the plugin health score?

Short story long As of October 24th, there is a new tab named Health Score on each plugin page of plugins.jenkins.io. This new tab provides the plugin’s health score, along with every aspect that contributed to its score. The score is meant to be unbiased and all plugins are evaluated the same way. Here is what it looks like: . Back to the beginning This project started...

Adrien Lecharpentier October 25, 2023
GSoC GitLab Plugin Modernization Project

The goal of this blog is to showcase the work done on GitLab Plugin during the Google Summer of Code 2023. For a detailed description of the project, please refer to the project page. Overview About Project Coding Phase 1 Coding Phase 2 Future Improvements Acknowledgments Useful Links About Project Plugins grow old and become difficult to maintain with time. GitLab Plugin was one such plugin that needed some love and...

Harsh Pratap Singh August 24, 2023
Summer Internship in Jenkins security

Context Jenkins is an open-source CI/CD solution that is extensible with a wide range of plugins that can be installed using the Jenkins plugin distribution repository or via manual installation. This extensibility is a powerful feature of Jenkins, but it is a critical aspect that has to be secured to avoid risks and vulnerabilities that can impact the Jenkins system. The internship took...

Andrea Chiera
Kevin Guerroudj
Wadeck Follonier August 23, 2023
How to remove deprecated plugins from Jenkins while using Docker

The Jenkins plugin ecosystem is highly active, and it’s not uncommon to come across deprecated plugins. This can be both positive and negative. On the positive side, it signifies that the plugin is no longer necessary since its functionality has been integrated into Jenkins core or rendered obsolete by new features or technologies. On the downside, deprecation could indicate that the plugin is...

Bruno Verachten
Kevin Martens June 20, 2023
Introducing Harsh Pratap Singh as the GSoC 2023 Contributor working on GitLab Plugin Modernization

This is Harsh Pratap Singh, an Open source enthusiast, who is currently in his freshman year exploring different technologies related to DevSecOps and Blockchain. I am curious and passionate about automation thus Jenkins is my goto Open Source organization for Google Summer of Code. This is my first time contributing to Open Source and I am already loving it. I am fortunate enough...

Harsh Pratap Singh May 18, 2023
Plugin Health Scoring System

The goal of this blog is to showcase the work done during the Google Summer of Code 2022 coding phases. For a detailed description of the project, please see the project page. Overview About Project Phase 1 Phase 2 Next Steps Acknowledgments Useful Links About Project Plugin maintenance is an extremely important phase of a plugin’s lifecycle. Jenkins is constantly developing, which raises the need for thousands of plugins to catch...

Dheeraj Singh Jodha October 10, 2022
Deprecating non-Java plugins

10 years ago, the Jenkins ruby-runtime was first released. It was an experiment to let plugins be written in ruby but still get integrated into the main Java Virtual Machine runtime with help of JRuby. A similar extension was made to allow plugins to be written in Python but still integrated into the Java Virtual Machine with Jython. Over the years though, the experiments...

Gavin Mogan
Oleg Nenashev
Mark Waite December 22, 2021
Security Validator for Jenkins Operator for Kubernetes

Background Jenkins custom resources on a Kubernetes cluster are deployed using declarative YAML configuration files; hence some of the plugins declared in these files may contain security warnings. So there is no way for the user to know other than manually checking for each on the site. This project aims to add an extra step of validation before creating/updating a new Jenkins Custom...

Pulkit Sharma August 23, 2021