The Jenkins community has recently completed the 2019 elections for Board and Officer positions. The call for nominations concluded on Nov 25 and the election results were announced in the developer mailing list on Nov 28. On behalf of the Jenkins community, we congratulate all elected board members and officers! We also thank all contributors who participated this year: all nominees and hundreds of voters. These are the...

Table of Contents The Problem Code Duplication And Security A Branch Is Not A Feature Documentation The Solution Code Duplication And Security A Branch Is Not A Feature Documentation This post will describe some common problems I’ve had with Jenkins and how I solved them by developing Generic Webhook Trigger Plugin. The Problem I was often struggling with the same issues when working with Jenkins: Code duplication and security - Jenkinsfiles in every repository. A branch is...

API keys and secrets are difficult to handle safely, and probably something you avoid thinking about. In this post I’ll show how the new AWS Secrets Manager Credentials Provider plugin allows you to marshal your secrets into one place, and use them securely from Jenkins. When CI/CD pipelines moved to the public cloud, credential management did not evolve with them. If you’re in this situation,...

Table of Contents Matrix building with scripted pipeline Screenshot of matrix pipeline Adding static choices Adding dynamic choices Full pipeline example with dynamic choices Background: How does it work? Exposing a shared library pipeline step Summary With the recent announcement about matrix building you can perform Matrix builds with declarative pipeline. However, if you must use scripted pipeline, then I’m going to cover how to matrix build platforms and tools using scripted pipeline. The examples...

This is a speaker blog post for a DevOps World | Jenkins World 2019 talk in Lisbon, Portugal and has been posted in line with NCC Group responsible disclosure policy. Related Jenkins security advisories: 2017-11-08, 2017-11-16, 2018-06-25, 2018-07-30, 2018-09-25, 2019-02-19, 2019-03-06, 2019-03-25, 2019-04-03, 2019-04-17, 2019-08-07, 2019-09-12, 2019-10-01, 2019-10-16, 2019-10-23. Some of the vulnerabilities have been announced without a fix, see Jenkins Security Spring Cleaning 2019. The most of the announced vulnerabilities are fixed at the moment of this blogpost publishing. Come join us...

In addition to WAR files and Docker images, the Jenkins project provides native installers for each weekly and LTS release. There are installers available for Linux distributions, Windows, macOS and other operating systems. There are also installers provided by third parties. You can find the list of these installers on the Downloads page. In this blog post, we announce the upcoming deprecation of the macOS native installer. We will...

I often find myself needing to run the same actions on a bunch of different configurations. Up to now, that meant I had to make multiple copies of the same stages in my pipelines. When I needed to make changes, I had to make the same changes in multiple places throughout my pipeline. Maintaining even a small number of configuration was difficult for larger pipelines. Declarative Pipeline 1.5.0-beta1...

Managing any software presents its own unique challenges. Jenkins controllers are no exception. For example, How do you keep a finger on the pulse of everything going on in your Jenkins environment? Are you looking at every new defect opened in the issue tracker? How do you make sure that your controllers or agents don’t silently fail? Are you monitoring its logs? All of its internal...