Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-59979

Script Security: JCasC ScriptApproval does not apply until Jenkins reboot

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Minor Minor
    • script-security-plugin
    • None
    • Jenkins ver. 2.164.2
      java.version 1.8.0_212
      configuration-as-code:1.32
      script-security:1.66

      When using the JCasC `ScriptApproval` argument the approvedSignatures don't seem to actually get applied until after Jenkins is restarted.  More info here

          [JENKINS-59979] Script Security: JCasC ScriptApproval does not apply until Jenkins reboot

          akostadinov added a comment -

          For me it worked properly on Jenkins 2.190, casc plugin 1.36 and Script Security plugin 1.68.

          security:
            scriptApproval:
              approvedSignatures:
              - method java.net.URI getHost
          

          akostadinov added a comment - For me it worked properly on Jenkins 2.190, casc plugin 1.36 and Script Security plugin 1.68. security: scriptApproval: approvedSignatures: - method java.net.URI getHost

          Chris Wiggins added a comment -

          I verified this is working with these versions:

          • JCasC plugin 1.51
          • Script Security Plugin 1.76
          • Jenkins version 2.263.1

          This ticket can be closed.

          Chris Wiggins added a comment - I verified this is working with these versions: JCasC plugin 1.51 Script Security Plugin 1.76 Jenkins version 2.263.1 This ticket can be closed.

            Unassigned Unassigned
            cwiggs Chris Wiggins
            Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: