• Type: Improvement
• Resolution: Unresolved
• Priority: Major
• Component/s: script-security-plugin
• Labels:

  None

[JENKINS-39773] Check if script needs approval before executing it

Max Wahler created issue - 2016-11-16 10:24

Max Wahler made changes - 2016-11-16 10:26

Description

Original: It often happens that I modify a pipeline script, it runs for several minutes in Jenkins and then fails because I added a method call that needs approval. Then I approve that method, run it again and have to hope that there's not another method call I have to approve. So IMHO it'd be great if Jenkins did some kind of "dry run" on a script to check if there's any method signature that still needs approval and immediately fails before the script was actually executed. This may also have severe consequences, e.g. if a component was deployed and the script fails afterwards and it's impossible to roll back the deployment.

New: It often happens that I modify a pipeline script, it runs for several minutes in Jenkins and then fails because I added a method call that needs approval. Then I approve that method, run it again and have to hope that there's not another method call I have to approve. So IMHO it'd be great if Jenkins did some kind of "dry run" on a script to check if there's any method signature that still needs approval and immediately fails before the script was actually executed. This may also have severe consequences, e.g. if a component was deployed and the script fails afterwards and it's impossible to roll back the deployment. Also, it's not possible to add script approvals manually using the web interface so I actually have to wait for the script to fail.

Andrew Bayer made changes - 2017-09-15 13:08

Component/s		New: script-security-plugin [ 18520 ]
Component/s	Original: pipeline [ 21692 ]