Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-53752

Block PRs from forks from untrusted users

    XMLWordPrintable

Details

    Description

      The plugin currently has no way to block untrusted users from making a PR from a fork and having this PR built by Jenkins. The GitHub Pull Request Builder does have this feature which is very useful for open source projects to protect the build system from malicious changes. The documentation on the GitHub Pull Request Builder wiki page says to move from the GHPRB plugin to the GitHub Branch source plugin which causes the user to lose this extremely useful functionality.

      Attachments

        Issue Links

          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. JENKINS-55778 Github branch source plugin builds untrusted builds during scan

          • Blocker - Blocks development and/or testing work, production could not run.
          • Resolved
          relates to

          New Feature - A new feature of the product, which has yet to be developed. JENKINS-46795 Abort builds with untrusted Jenkinsfile, but only given passive cause

          • Major - Major loss of function.
          • In Review

          Bug - A problem which impairs or prevents the functions of the product. JENKINS-53753 Misleading documentation for permissions

          • Major - Major loss of function.
          • Open
          links to

          Web Link PR #188

          Web Link scm-api#56

          Activity

            People

              Unassigned Unassigned
              roguishmountain Sam Schwarz
              Votes:
              6 Vote for this issue
              Watchers:
              12 Start watching this issue

              Dates

                Created:
                Updated: