May 13, 2022 · This plugin uses Probely to scan your web application for security vulnerabilities. It enables security testing in your CI/CD pipeline.

This plug-in publishes Software Bill-of-Materials (SBOM) to Dependency-Track for continuous analysis. This plugin supports CycloneDX and SPDX SBOM formats.

May 17, 2022 · This vulnerability allows attackers to have Jenkins send an HTTP request to an attacker-specified webserver. This form validation method no ...

The following lists the properties and the version of Jenkins they were introduced in. Property - Java property name. Default - Default value if not explicitly ...

The Jenkins Configuration as Code (JCasC) feature defines Jenkins configuration parameters in a human-readable YAML file that can be stored as source code.

Oct 19, 2022 · This vulnerability allows attackers with permission to define untrusted Pipeline libraries and to define and run sandboxed Pipelines, to bypass ...

Mar 14, 2023 · My understanding is subversion seems to be reached by Jenkins and Jenkins got authentication using plain password. 2023-03-14 21:15:03.429 [ ...

Helper classes and methods to simplify the creation of jobs, agents, security realms, SCM implementations and more. Declarative annotations to specify the ...

Nov 12, 2018 · In this blog post, I continue on both by discussing more details on security related quality gates and bringing this together with the handling ...

Apr 10, 2017 · This advisory announces vulnerabilities or security-related fixes in these Jenkins plugins: Adaptive DSL · Application Detector.