-
Improvement
-
Resolution: Fixed
-
Major
For security reasons, it's quite important for this plugin to support an option to verify a "secret" token. This option was added some time ago, you basically configure a "secret" in the GitHub webhook end, so you know the requests you are receiving is really from GitHub. The GitHub Pull Request Builder plugin (ghprb) already supports it. It would be great if this plugin add support too.
- is related to
-
JENKINS-37956 Missing notification about request with bad secret for GitHub plugin
-
- Open
-
- relates to
-
JENKINS-62097 Permit multiple webhook secrets to be registered
-
- Resolved
-
- links to
[JENKINS-33974] Add option to verify "secret" token
Workflow | Original: JNJira [ 169985 ] | New: JNJira + In-Review [ 183715 ] |
Link | New: This issue is related to JENKINS-37956 [ JENKINS-37956 ] |
Link | New: This issue relates to JENKINS-37956 [ JENKINS-37956 ] |
Link | Original: This issue relates to JENKINS-37956 [ JENKINS-37956 ] |
Remote Link | New: This issue links to "github-plugin #134 (Web Link)" [ 24884 ] |
Released As | New: https://github.com/jenkinsci/github-plugin/releases/tag/v1.21.0 | |
Resolution | New: Fixed [ 1 ] | |
Status | Original: Open [ 1 ] | New: Resolved [ 5 ] |
Link |
New:
This issue relates to |