-
Type:
Bug
-
Resolution: Unresolved
-
Priority:
Major
-
Component/s: artifact-manager-s3-plugin
-
Environment:Jenkins 2.504.3 running in Docker on Debian 12 using the official jenkins/jenkins:2.504.3-lts image accessed through Traefik reverse proxy to handle HTTPS
S3 backend - MinIO running in Docker (quay.io/minio/minio:RELEASE.2025-04-22T22-12-26Z) accessed through Traefik reverse proxy to handle HTTPS
Jenkins: 2.504.3
OS: Linux - 6.1.0-37-amd64
Java: 21.0.7 - Eclipse Adoptium (OpenJDK 64-Bit Server VM)
---
ArtifactoryArtifactManager:1.3.1
Office-365-Connector:5.1.0
ace-editor:1.1
active-directory:2.40
analysis-model-api:13.7.0
ant:513.vde9e7b_a_0da_0f
antisamy-markup-formatter:173.v680e3a_b_69ff3
apache-httpcomponents-client-4-api:4.5.14-269.vfa_2321039a_83
apache-httpcomponents-client-5-api:5.5-150.veb_76e719855b_
artifact-manager-s3:949.v2567c4c52d79
artifactory:4.0.8
asm-api:9.8-163.vb_2a_96d3f9c3c
authentication-tokens:1.131.v7199556c3004
aws-credentials:248.v78a_dcfc9db_ff
aws-global-configuration:146.vfcec61593eea_
aws-java-sdk-ec2:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-minimal:1.12.780-480.v4a_0819121a_9e
aws-java-sdk2-core:2.31.63-54.vcf1e5a_c56c49
aws-java-sdk2-ec2:2.31.63-54.vcf1e5a_c56c49
aws-java-sdk2-s3:2.31.63-54.vcf1e5a_c56c49
blueocean:1.27.21
blueocean-autofavorite:1.2.5
blueocean-bitbucket-pipeline:1.27.21
blueocean-commons:1.27.21
blueocean-config:1.27.21
blueocean-core-js:1.27.21
blueocean-dashboard:1.27.21
blueocean-display-url:2.4.4
blueocean-events:1.27.21
blueocean-git-pipeline:1.27.21
blueocean-github-pipeline:1.27.21
blueocean-i18n:1.27.21
blueocean-jira:1.27.21
blueocean-jwt:1.27.21
blueocean-personalization:1.27.21
blueocean-pipeline-api-impl:1.27.21
blueocean-pipeline-editor:1.27.21
blueocean-pipeline-scm-api:1.27.21
blueocean-rest:1.27.21
blueocean-rest-impl:1.27.21
blueocean-web:1.27.21
bootstrap5-api:5.3.7-1
bouncycastle-api:2.30.1.80-261.v00c0e2618ec3
branch-api:2.1235.v04e86c7ce54c
build-monitor-plugin:1.14-985.v7b_f37b_3d0b_f5
build-timeout:1.38
build-timestamp:1.1.0
built-on-column:1.5
caffeine-api:3.2.2-178.v353b_8428ed56
checks-api:373.vfe7645102093
cloud-stats:377.vd8a_6c953e98e
cloudbees-bitbucket-branch-source:936.4.4
cloudbees-folder:6.1036.vb_94fd035b_287
command-launcher:123.v37cfdc92ef67
commons-collections4-api:4.5.0-8.va_d5448ef9011
commons-compress-api:1.27.1-3
commons-lang3-api:3.18.0-98.v3a_674c06072d
commons-text-api:1.14.0-194.v804a_dc3a_1b_d8
conditional-buildstep:1.5.0
config-file-provider:988.v0461fcc2b_9d1
copyartifact:770.va_6c69e063442
credentials:1419.v2337d1ceceef
credentials-binding:702.vfe613e537e88
dashboard-view:2.537.v5132851f6ca_f
data-tables-api:2.3.2-3
display-url-api:2.209.v582ed814ff2f
docker-commons:457.v0f62a_94f11a_3
docker-java-api:3.5.2-119.v54c784c71fa_3
docker-plugin:1274.vc0203fdf2e74
docker-workflow:621.va_73f881d9232
doxygen:178.v6ea_ef5f7dfdb
dtkit-api:3.0.3
durable-task:595.ve87b_f1318d67
echarts-api:5.6.0-5
eddsa-api:0.3.0.1-19.vc432d923e5ee
email-ext:1922.v5c93c9e80a_f9
envinject:2.926.v69c9b_3896a_96
envinject-api:1.235.va_14c74f8f487
external-monitor-job:223.vb_fddcf42c9b_3
favorite:2.237.v79163ca_8b_892
file-operations:353.vf3b_9b_a_f1f7f7
font-awesome-api:7.0.0-1
forensics-api:3.1.0
git:5.7.0
git-changelog:3.45
git-client:6.2.0
git-server:137.ve0060b_432302
github:1.44.0
github-api:1.321-488.v9b_c0da_9533f8
github-branch-source:1833.v77b_6542df5a_8
gitlab-api:5.6.0-100.v83f8f4b_f1129
gitlab-oauth:1.22
gitlab-plugin:1.9.8
gradle:2.15
gson-api:2.13.1-153.vb_3d0c48a_a_b_4a_
handlebars:1.1.1
handy-uri-templates-2-api:2.1.8-36.v85e4cb_234a_13
htmlpublisher:427
hudson-pview-plugin:1.8
influxdb:5.0
instance-identity:203.v15e81a_1b_7a_38
ionicons-api:88.va_4187cb_eddf1
ivy:582.v35fb_da_0312f7
jackson2-api:2.19.2-408.v18248a_324cfe
jakarta-activation-api:2.1.3-2
jakarta-mail-api:2.1.3-2
javadoc:327.vdfe586651ee0
javax-activation-api:1.2.0-8
javax-mail-api:1.6.2-11
jaxb:2.3.9-133.vb_ec76a_73f706
jdk-tool:83.v417146707a_3d
jenkins-design-language:1.27.21
jenkins-webterminal:1.2
jersey2-api:2.47-165.ve7809a_3e87e0
jira:3.18
jjwt-api:0.11.5-120.v0268cf544b_89
jobConfigHistory:1343.v4b_e819a_ecdc2
joda-time-api:2.14.0-149.v1c3ce991d1b_9
jquery-detached:1.2.1
jquery3-api:3.7.1-3
jsch:0.2.16-95.v3eecb_55fa_b_78
json-api:20250517-163.v1c5da_e99c775
json-path-api:2.9.0-178.vca_b_c71881321
jsoup:1.21.1-58.vfc578e6e2610
junit:1335.v6b_a_a_e18534e1
ldap:780.vcb_33c9a_e4332
lockable-resources:1408.vb_7d1f371781d
log-parser:2.5.0
mailer:509.vc54d23fc427e
mapdb-api:1.0.9-44.va_1e1310c9118
matrix-auth:3.2.6
matrix-project:849.v0cd64ed7e531
maven-plugin:3.26
mercurial:1309.v6802b_f0efb_b_9
mina-sshd-api-common:2.15.0-161.vb_200831a_c15b_
mina-sshd-api-core:2.15.0-161.vb_200831a_c15b_
modernstatus:1.3
momentjs:1.1.1
msbuild:1.37
nested-view:241.v178f0b_a_cd76a_
next-build-number:66.v4b_4762172d53
nodejs:1.6.5
nomad:0.10.0
okhttp-api:4.11.0-189.v976fa_d3379d6
oss-symbols-api:390.va_22c30a_b_23a_2
pam-auth:1.12
parameterized-trigger:859.vb_e3907a_07a_16
pipeline-build-step:571.v08a_fffd4b_0ce
pipeline-github-lib:65.v203688e7727e
pipeline-graph-analysis:241.vc3d48fb_b_2582
pipeline-groovy-lib:752.vdddedf804e72
pipeline-input-step:532.v9e7466cb_4406
pipeline-milestone-step:138.v78ca_76831a_43
pipeline-model-api:2.2258.v4e96d2b_da_f9b_
pipeline-model-definition:2.2258.v4e96d2b_da_f9b_
pipeline-model-extensions:2.2258.v4e96d2b_da_f9b_
pipeline-multibranch-defaults:2.1
pipeline-rest-api:2.38
pipeline-stage-step:322.vecffa_99f371c
pipeline-stage-tags-metadata:2.2258.v4e96d2b_da_f9b_
pipeline-stage-view:2.38
pipeline-utility-steps:2.19.0
plain-credentials:199.v9f8e1f741799
plugin-usage-plugin:4.10
plugin-util-api:6.1.0
postbuild-task:78.v24529f1f5cdb_
powershell:2.3
prism-api:1.30.0-1
pubsub-light:1.19
release:2.19
resource-disposer:0.25
run-condition:243.v3c3f94e46a_8b_
scm-api:707.v749f968369d4
script-security:1373.vb_b_4a_a_c26fa_00
short-workspace-path:0.3
simple-theme-plugin:211.v5424a_5510e47
snakeyaml-api:2.3-125.v4d77857a_b_402
sse-gateway:1.28
ssh-credentials:359.v2191c4cf635f
ssh-slaves:3.1071.v0d059c7b_c555
sshd:3.372.v5d04a_e92d8cf
structs:350.v3b_30f09f2363
subversion:1287.vd2d507146906
test-results-analyzer:309.vda_3a_a_f100542
text-finder:1.32
throttle-concurrents:2.16
timestamper:1.30
token-macro:444.v52de7e9c573d
trilead-api:2.209.v0e69b_c43c245
variant:70.va_d9f17f859e0
view-job-filters:401.va_809f6a_b_0c26
warnings-ng:12.8.0
workflow-aggregator:608.v67378e9d3db_1
workflow-api:1380.ve03e7a_63d139
workflow-basic-steps:1079.vce64b_a_929c5a_
workflow-cps:4169.vb_7e492a_1c7b_e
workflow-durable-task-step:1442.vb_a_b_f5f3da_9f9
workflow-job:1540.v295eccc9778f
workflow-multibranch:810.v6b_6e77da_7058
workflow-scm-step:437.v05a_f66b_e5ef8
workflow-step-api:704.ve4f0967e98fa_
workflow-support:968.v8f17397e87b_8
ws-cleanup:0.48
xunit:3.1.5
Jenkins 2.504.3 running in Docker on Debian 12 using the official jenkins/jenkins:2.504.3-lts image accessed through Traefik reverse proxy to handle HTTPS S3 backend - MinIO running in Docker (quay.io/minio/minio:RELEASE.2025-04-22T22-12-26Z) accessed through Traefik reverse proxy to handle HTTPS Jenkins: 2.504.3 OS: Linux - 6.1.0-37-amd64 Java: 21.0.7 - Eclipse Adoptium (OpenJDK 64-Bit Server VM) --- ArtifactoryArtifactManager:1.3.1 Office-365-Connector:5.1.0 ace-editor:1.1 active-directory:2.40 analysis-model-api:13.7.0 ant:513.vde9e7b_a_0da_0f antisamy-markup-formatter:173.v680e3a_b_69ff3 apache-httpcomponents-client-4-api:4.5.14-269.vfa_2321039a_83 apache-httpcomponents-client-5-api:5.5-150.veb_76e719855b_ artifact-manager-s3:949.v2567c4c52d79 artifactory:4.0.8 asm-api:9.8-163.vb_2a_96d3f9c3c authentication-tokens:1.131.v7199556c3004 aws-credentials:248.v78a_dcfc9db_ff aws-global-configuration:146.vfcec61593eea_ aws-java-sdk-ec2:1.12.780-480.v4a_0819121a_9e aws-java-sdk-minimal:1.12.780-480.v4a_0819121a_9e aws-java-sdk2-core:2.31.63-54.vcf1e5a_c56c49 aws-java-sdk2-ec2:2.31.63-54.vcf1e5a_c56c49 aws-java-sdk2-s3:2.31.63-54.vcf1e5a_c56c49 blueocean:1.27.21 blueocean-autofavorite:1.2.5 blueocean-bitbucket-pipeline:1.27.21 blueocean-commons:1.27.21 blueocean-config:1.27.21 blueocean-core-js:1.27.21 blueocean-dashboard:1.27.21 blueocean-display-url:2.4.4 blueocean-events:1.27.21 blueocean-git-pipeline:1.27.21 blueocean-github-pipeline:1.27.21 blueocean-i18n:1.27.21 blueocean-jira:1.27.21 blueocean-jwt:1.27.21 blueocean-personalization:1.27.21 blueocean-pipeline-api-impl:1.27.21 blueocean-pipeline-editor:1.27.21 blueocean-pipeline-scm-api:1.27.21 blueocean-rest:1.27.21 blueocean-rest-impl:1.27.21 blueocean-web:1.27.21 bootstrap5-api:5.3.7-1 bouncycastle-api:2.30.1.80-261.v00c0e2618ec3 branch-api:2.1235.v04e86c7ce54c build-monitor-plugin:1.14-985.v7b_f37b_3d0b_f5 build-timeout:1.38 build-timestamp:1.1.0 built-on-column:1.5 caffeine-api:3.2.2-178.v353b_8428ed56 checks-api:373.vfe7645102093 cloud-stats:377.vd8a_6c953e98e cloudbees-bitbucket-branch-source:936.4.4 cloudbees-folder:6.1036.vb_94fd035b_287 command-launcher:123.v37cfdc92ef67 commons-collections4-api:4.5.0-8.va_d5448ef9011 commons-compress-api:1.27.1-3 commons-lang3-api:3.18.0-98.v3a_674c06072d commons-text-api:1.14.0-194.v804a_dc3a_1b_d8 conditional-buildstep:1.5.0 config-file-provider:988.v0461fcc2b_9d1 copyartifact:770.va_6c69e063442 credentials:1419.v2337d1ceceef credentials-binding:702.vfe613e537e88 dashboard-view:2.537.v5132851f6ca_f data-tables-api:2.3.2-3 display-url-api:2.209.v582ed814ff2f docker-commons:457.v0f62a_94f11a_3 docker-java-api:3.5.2-119.v54c784c71fa_3 docker-plugin:1274.vc0203fdf2e74 docker-workflow:621.va_73f881d9232 doxygen:178.v6ea_ef5f7dfdb dtkit-api:3.0.3 durable-task:595.ve87b_f1318d67 echarts-api:5.6.0-5 eddsa-api:0.3.0.1-19.vc432d923e5ee email-ext:1922.v5c93c9e80a_f9 envinject:2.926.v69c9b_3896a_96 envinject-api:1.235.va_14c74f8f487 external-monitor-job:223.vb_fddcf42c9b_3 favorite:2.237.v79163ca_8b_892 file-operations:353.vf3b_9b_a_f1f7f7 font-awesome-api:7.0.0-1 forensics-api:3.1.0 git:5.7.0 git-changelog:3.45 git-client:6.2.0 git-server:137.ve0060b_432302 github:1.44.0 github-api:1.321-488.v9b_c0da_9533f8 github-branch-source:1833.v77b_6542df5a_8 gitlab-api:5.6.0-100.v83f8f4b_f1129 gitlab-oauth:1.22 gitlab-plugin:1.9.8 gradle:2.15 gson-api:2.13.1-153.vb_3d0c48a_a_b_4a_ handlebars:1.1.1 handy-uri-templates-2-api:2.1.8-36.v85e4cb_234a_13 htmlpublisher:427 hudson-pview-plugin:1.8 influxdb:5.0 instance-identity:203.v15e81a_1b_7a_38 ionicons-api:88.va_4187cb_eddf1 ivy:582.v35fb_da_0312f7 jackson2-api:2.19.2-408.v18248a_324cfe jakarta-activation-api:2.1.3-2 jakarta-mail-api:2.1.3-2 javadoc:327.vdfe586651ee0 javax-activation-api:1.2.0-8 javax-mail-api:1.6.2-11 jaxb:2.3.9-133.vb_ec76a_73f706 jdk-tool:83.v417146707a_3d jenkins-design-language:1.27.21 jenkins-webterminal:1.2 jersey2-api:2.47-165.ve7809a_3e87e0 jira:3.18 jjwt-api:0.11.5-120.v0268cf544b_89 jobConfigHistory:1343.v4b_e819a_ecdc2 joda-time-api:2.14.0-149.v1c3ce991d1b_9 jquery-detached:1.2.1 jquery3-api:3.7.1-3 jsch:0.2.16-95.v3eecb_55fa_b_78 json-api:20250517-163.v1c5da_e99c775 json-path-api:2.9.0-178.vca_b_c71881321 jsoup:1.21.1-58.vfc578e6e2610 junit:1335.v6b_a_a_e18534e1 ldap:780.vcb_33c9a_e4332 lockable-resources:1408.vb_7d1f371781d log-parser:2.5.0 mailer:509.vc54d23fc427e mapdb-api:1.0.9-44.va_1e1310c9118 matrix-auth:3.2.6 matrix-project:849.v0cd64ed7e531 maven-plugin:3.26 mercurial:1309.v6802b_f0efb_b_9 mina-sshd-api-common:2.15.0-161.vb_200831a_c15b_ mina-sshd-api-core:2.15.0-161.vb_200831a_c15b_ modernstatus:1.3 momentjs:1.1.1 msbuild:1.37 nested-view:241.v178f0b_a_cd76a_ next-build-number:66.v4b_4762172d53 nodejs:1.6.5 nomad:0.10.0 okhttp-api:4.11.0-189.v976fa_d3379d6 oss-symbols-api:390.va_22c30a_b_23a_2 pam-auth:1.12 parameterized-trigger:859.vb_e3907a_07a_16 pipeline-build-step:571.v08a_fffd4b_0ce pipeline-github-lib:65.v203688e7727e pipeline-graph-analysis:241.vc3d48fb_b_2582 pipeline-groovy-lib:752.vdddedf804e72 pipeline-input-step:532.v9e7466cb_4406 pipeline-milestone-step:138.v78ca_76831a_43 pipeline-model-api:2.2258.v4e96d2b_da_f9b_ pipeline-model-definition:2.2258.v4e96d2b_da_f9b_ pipeline-model-extensions:2.2258.v4e96d2b_da_f9b_ pipeline-multibranch-defaults:2.1 pipeline-rest-api:2.38 pipeline-stage-step:322.vecffa_99f371c pipeline-stage-tags-metadata:2.2258.v4e96d2b_da_f9b_ pipeline-stage-view:2.38 pipeline-utility-steps:2.19.0 plain-credentials:199.v9f8e1f741799 plugin-usage-plugin:4.10 plugin-util-api:6.1.0 postbuild-task:78.v24529f1f5cdb_ powershell:2.3 prism-api:1.30.0-1 pubsub-light:1.19 release:2.19 resource-disposer:0.25 run-condition:243.v3c3f94e46a_8b_ scm-api:707.v749f968369d4 script-security:1373.vb_b_4a_a_c26fa_00 short-workspace-path:0.3 simple-theme-plugin:211.v5424a_5510e47 snakeyaml-api:2.3-125.v4d77857a_b_402 sse-gateway:1.28 ssh-credentials:359.v2191c4cf635f ssh-slaves:3.1071.v0d059c7b_c555 sshd:3.372.v5d04a_e92d8cf structs:350.v3b_30f09f2363 subversion:1287.vd2d507146906 test-results-analyzer:309.vda_3a_a_f100542 text-finder:1.32 throttle-concurrents:2.16 timestamper:1.30 token-macro:444.v52de7e9c573d trilead-api:2.209.v0e69b_c43c245 variant:70.va_d9f17f859e0 view-job-filters:401.va_809f6a_b_0c26 warnings-ng:12.8.0 workflow-aggregator:608.v67378e9d3db_1 workflow-api:1380.ve03e7a_63d139 workflow-basic-steps:1079.vce64b_a_929c5a_ workflow-cps:4169.vb_7e492a_1c7b_e workflow-durable-task-step:1442.vb_a_b_f5f3da_9f9 workflow-job:1540.v295eccc9778f workflow-multibranch:810.v6b_6e77da_7058 workflow-scm-step:437.v05a_f66b_e5ef8 workflow-step-api:704.ve4f0967e98fa_ workflow-support:968.v8f17397e87b_8 ws-cleanup:0.48 xunit:3.1.5
When downloading some files where the file extension is .pkg (e.g. artifact.pkg) but the file is downloaded with a .zip extension. The files in question, when uploaded by Jenkins, are stored with the metadata Content-Type application/zip. Other files with different MIME types are unaffected. This only appears to be an issue when downloaded using the magic link generated by Jenkins (with a short lived token), not when downloaded from MinIO without the additional magic link (or through the web console).
Â
For e.g.:
https://minio-api.domain.com/jenkins-builds/5/artifact.pkg?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Date=20250731T183125Z&X-Amz-SignedHeaders=host&X-Amz-Credential=----------E7P15%2F20250731%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Expires=3600&X-Amz-Signature=3c295c792518c9440cb0a4e3544055-----------------------
results in artifact.zip being downloaded
https://minio-api.domain.com/jenkins-builds/5/artifact.pkg results in artifact.pkg being downloaded
(Actual URLs obfuscated, secrets partially obfuscated with dashes)
Â
In our case an easy mitigation would be be to let us specify anonymous download in Artifact Manager settings, letting users download the artifacts anonymously without creating a massive link with embedded credentials, however, this wouldn't fix the root cause.
