Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-48939

PRQA Plugin is affected by JEP-200 in Jenkins 2.102+

    XMLWordPrintable

    Details

    • Similar Issues:

      Description

      During the code inspections for JEP-200 I have discovered that the plugin is most likely affected by this security hardening in the Jenkins core.

      • Plugin uses PRQAComplianceStatus in MasterToSlaveCallable operations
      • This class comes from an external library without a "Jenkins-ClassFilter-Whitelisted" manifest entry
      • In Jenkins 2.102+ such classes will be blacklisted unless a workaround is applied

      You can find more guidelines for plugin developers in this blogpost: https://jenkins.io/blog/2018/01/13/jep-200/#for-plugin-developers. Please let us know if you need any additional info or reviews regarding this issue.

        Attachments

          Issue Links

          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. JENKINS-50333 While configuring PRQA Post build action error is coming

          • Major - Major loss of function.
          • Resolved
          relates to

          Bug - A problem which impairs or prevents the functions of the product. JENKINS-50333 While configuring PRQA Post build action error is coming

          • Major - Major loss of function.
          • Resolved

            Activity

            Ascending order - Click to sort in descending order
            oleg_nenashev Oleg Nenashev created issue -
            oleg_nenashev Oleg Nenashev made changes -
            Field Original Value New Value
            Environment Jenkins 2.102+
            Hide
            Permalink
            oleg_nenashev Oleg Nenashev added a comment -

            I have got information from Ewelina Wilkosz that the plugin is no longer maintained by Praqma.
            CC Igor Kostenko and Marcos Bento who are listed in Repository permission updater

            Show
            oleg_nenashev Oleg Nenashev added a comment - I have got information from Ewelina Wilkosz that the plugin is no longer maintained by Praqma. CC Igor Kostenko and Marcos Bento who are listed in Repository permission updater
            oleg_nenashev Oleg Nenashev made changes -
            Assignee Praqma Support [ praqma ] Igor Kostenko [ igorkostenko ]
            Hide
            Permalink
            oleg_nenashev Oleg Nenashev added a comment -

            I also dropped the default assignee of the component. Please let me know whom to set the new lead of the component in JIRA

            Show
            oleg_nenashev Oleg Nenashev added a comment - I also dropped the default assignee of the component. Please let me know whom to set the new lead of the component in JIRA
            jglick Jesse Glick made changes -
            Remote Link This issue links to "Page (Jenkins Wiki)" [ 19818 ]
            oleg_nenashev Oleg Nenashev made changes -
            Remote Link This issue links to "Page (Jenkins Wiki)" [ 19818 ]
            Hide
            Permalink
            oleg_nenashev Oleg Nenashev added a comment -

            The plugin and the library are being maintained by the tool vendor. The plugin has no real tests. Although I have a license for PRQA, it would take a while to setup the test projects, etc.
            So far me and Jesse Glick are not going to spend time on fixing this plugin unless there is a community feedback.

            Igor Kostenko Marcos Bento Please let us know if you need any advice.

            Show
            oleg_nenashev Oleg Nenashev added a comment - The plugin and the library are being maintained by the tool vendor. The plugin has no real tests. Although I have a license for PRQA, it would take a while to setup the test projects, etc. So far me and Jesse Glick are not going to spend time on fixing this plugin unless there is a community feedback. Igor Kostenko Marcos Bento Please let us know if you need any advice.
            jglick Jesse Glick made changes -
            Labels jep-200 JEP-200
            igorkostenko Igor Kostenko made changes -
            Assignee Igor Kostenko [ igorkostenko ] Marcos Bento [ marcos_bento ]
            Hide
            Permalink
            oleg_nenashev Oleg Nenashev added a comment -

            Igor Kostenko Marcos Bento ping

            Show
            oleg_nenashev Oleg Nenashev added a comment - Igor Kostenko Marcos Bento ping
            Hide
            Permalink
            oleg_nenashev Oleg Nenashev added a comment -

            I have raised the question to the tool vendor 10 days ago. JEP-200 maintainers are not going to work on it so far

            Show
            oleg_nenashev Oleg Nenashev added a comment - I have raised the question to the tool vendor 10 days ago. JEP-200 maintainers are not going to work on it so far
            oleg_nenashev Oleg Nenashev made changes -
            Link This issue relates to JENKINS-50333 [ JENKINS-50333 ]
            oleg_nenashev Oleg Nenashev made changes -
            Summary PRQA Plugin is likely affected by JEP-200 in Jenkins 2.102+ PRQA Plugin is affected by JEP-200 in Jenkins 2.102+
            oleg_nenashev Oleg Nenashev made changes -
            Link This issue is duplicated by JENKINS-50333 [ JENKINS-50333 ]
            Hide
            Permalink
            priyat Priyanga G added a comment -

            Oleg Nenashev,

            So,We cant able to work PRQA in jenkins?

            Thanks,

            Priyanga

            Show
            priyat Priyanga G added a comment - Oleg Nenashev, So,We cant able to work PRQA in jenkins? Thanks, Priyanga
            Hide
            Permalink
            oleg_nenashev Oleg Nenashev added a comment -

            Priyanga G Please see https://jenkins.io/blog/2018/03/15/jep-200-lts/ . This blogpost offers troubleshooting guidelines and some workaround options. You won't be able to use this plugin with Jenkins 2.102+ if you do not construct workaround class filter settings.

            We were unable to get a response from the plugin maintainers even after reaching out to PRQA directly. If you suffer from this issue, please submit a support ticket to PRQA.

            Show
            oleg_nenashev Oleg Nenashev added a comment - Priyanga G Please see https://jenkins.io/blog/2018/03/15/jep-200-lts/ . This blogpost offers troubleshooting guidelines and some workaround options. You won't be able to use this plugin with Jenkins 2.102+ if you do not construct workaround class filter settings. We were unable to get a response from the plugin maintainers even after reaching out to PRQA directly. If you suffer from this issue, please submit a support ticket to PRQA.
            Hide
            Permalink
            priyat Priyanga G added a comment - - edited

            Oleg Nenashev,

            Thank you for reply sir.

            I am using Jenkins 2.111 version.If I downgrade the Jenkins version.It will work??

            Show
            priyat Priyanga G added a comment - - edited Oleg Nenashev, Thank you for reply sir. I am using Jenkins 2.111 version.If I downgrade the Jenkins version.It will work??
            Hide
            Permalink
            oleg_nenashev Oleg Nenashev added a comment -

            Yes, it will

            Show
            oleg_nenashev Oleg Nenashev added a comment - Yes, it will
            Hide
            Permalink
            priyat Priyanga G added a comment -

            Thank you sir.

            Show
            priyat Priyanga G added a comment - Thank you sir.
            oleg_nenashev Oleg Nenashev made changes -
            Priority Minor [ 4 ] Blocker [ 1 ]
            marcos_bento Marcos Bento made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            marcos_bento Marcos Bento made changes -
            Status In Progress [ 3 ] In Review [ 10005 ]
            marcos_bento Marcos Bento made changes -
            Resolution Fixed [ 1 ]
            Status In Review [ 10005 ] Resolved [ 5 ]
            Hide
            Permalink
            marcos_bento Marcos Bento added a comment -

            This issue is fixed in PRQA Jenkins plugin 3.0.1.

            Show
            marcos_bento Marcos Bento added a comment - This issue is fixed in PRQA Jenkins plugin 3.0.1.
            Hide
            Permalink
            oleg_nenashev Oleg Nenashev added a comment -

            Marcos Bento there is no source code in https://github.com/jenkinsci/prqa-plugin . Could you please push it?

            Show
            oleg_nenashev Oleg Nenashev added a comment - Marcos Bento there is no source code in https://github.com/jenkinsci/prqa-plugin . Could you please push it?
            Hide
            Permalink
            marcos_bento Marcos Bento added a comment -

            The source code has been pushed.

            Show
            marcos_bento Marcos Bento added a comment - The source code has been pushed.
            Hide
            Permalink
            oleg_nenashev Oleg Nenashev added a comment -

            thanks!

            Show
            oleg_nenashev Oleg Nenashev added a comment - thanks!

              People

              Assignee:
              marcos_bento Marcos Bento
              Reporter:
              oleg_nenashev Oleg Nenashev
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: