Child pages
  • Permissive Script Security Plugin

Due to some maintenance issues, this service has been switched in read-only mode, you can find more information about the why

and how to migrate your plugin documentation in this blogpost

Skip to end of metadata
Go to start of metadata

Turn on permissive mode of Script Security Plugin. Problematic signatures will be logged but access will not be rejected.

Plugin Information

View Permissive Script Security on the plugin site for more information.

This plugin enables execution of unsecured groovy scripts on Jenkins master. Do not use it unless you know what you are doing.

Suppressing the security put in place in several Jenkins plugins is discouraged though sometimes useful practice. For example, migrating configuration from a plugin version that allows unsecured script execution to the secured version. Enabling this temporarily, will not block on potentially unsafe signatures so they can be evaluated and whitelisted and the plugin can be uninstalled again.

The plugin is disabled after installation. It can be enabled providing -Dpermissive-script-security.enabled=true property to Jenkins master JVM. Since 0.3, value no_security is supported to permit not whitelisted signatures without any logging. Note that this is not secure at all.

  • No labels

1 Comment

  1. Unknown User (iplaman)

    Might be useful to set on https://jenkins_server/log/levels

    "org.jenkinsci.plugins.permissivescriptsecurity.PermissiveWhitelist" as "warning" otherwise Jenkins error logs are blowing up with exceptions of this class