Builds from untrusted source on Branch Indexing

This issue is archived. You can view it, but you can't modify it. Learn more

XMLWordPrintable

      Using the same configuration as is detailed in JENKINS-58618, I am also finding that PRs that should not be built because they are from untrusted sources will get built during the Branch Indexing:

      Checking pull request #814
       (not from a trusted source)
       'Jenkinsfile' found
       Met criteria
      Changes detected: PR-814 (null → [redacted])
      Connecting to https://api.github.com to check permissions of obtain list of [redacted] for [redacted]/[redacted]
      Loading trusted files from base branch master at [redacted] rather than [redacted]
      Scheduled build for branch: PR-814
      

      You can see that it was determined to be untrusted and reverted to the Jenkinsfile from the origin instead of the PR, but shouldn't the setting in:

      https://issues.jenkins-ci.org/secure/attachment/48061/image-2019-07-23-10-30-22-210.png

      mean that it's not even run at all?

            Assignee:
            Unassigned
            Reporter:
            Brian J Murrell
            Archiver:
            Jenkins Service Account

              Created:
              Updated:
              Archived: