Page 51

• Calling for Colombian Jenkins users!

  The Jenkins project has learned that a company is trying to register "Jenkins" as a trademark in Colombia. This is alarming for us, and we are trying to oppose it. In order to do this effectively, we need to hear from Colombian users of Jenkins. Figure 1. South American visitors to jenkins.io for 2017 The Jenkins project owns a trademark "Jenkins" in...

  

  Kohsuke Kawaguchi April 27, 2017
• Important security updates for Jenkins core

  We just released security updates to Jenkins, versions 2.57 and 2.46.2, that fix several security vulnerabilities, including a critical one. That critical vulnerability is an unauthenticated remote code execution via the remoting-based CLI. When I announced the fix for the previous vulnerability of this kind, I announced our plans to revisit the design of the CLI that enabled this class of vulnerabilities. Since...

  Daniel Beck April 26, 2017
• Securing a Jenkins instance on Azure

  This is a guest post by Claudiu Guiman and Eric Jizba, Software Engineers in the Azure DevOps team at Microsoft. If you have any questions, please email us at azdevopspub@microsoft.com. One of the most frequently asked questions for managing a Jenkins instance is "How do I make it secure?" Like any other web application, these issues must be solved: How do I securely pass secrets...

  Claudiu Guiman April 20, 2017
• Delivery Pipelines, with Jenkins 2, SonarQube, and Artifactory

  This is a guest post by Michael Hüttermann. Michael is an expert in Continuous Delivery, DevOps and SCM/ALM. More information about him at huettermann.net, or follow him on Twitter: @huettermann. Continuous Delivery and DevOps are well known and widely spread practices nowadays. It is commonly accepted that it is crucial to form great teams and define shared goals first and then choose and integrate...

  

  Michael Hüttermann April 18, 2017
• Getting Started with the Blue Ocean Dashboard

  This is a guest post by Liam Newman, Technical Evangelist at CloudBees. Blue Ocean is a new user experience for Jenkins, and version 1.0 is now live! Blue Ocean makes Jenkins, and continuous delivery, approachable to all team members. In my previous post, I used the Blue Ocean Activity View to track the state of branches and Pull Requests in one project. In this video, I’ll use the...

  

  Liam Newman April 12, 2017
• Jenkins World 2017 Agenda is Live!

  This is a guest post by Alyssa Tong, who runs the Jenkins Area Meetup program and is also responsible for Marketing & Community Programs at CloudBees, Inc. I am excited to announce the agenda for Jenkins World 2017. This year’s event promises to have something for everyone - whether you are a novice, intermediate, or advanced user…​you are covered. Jenkins World 2017 consists of 6 tracks,...

  

  Alyssa Tong April 12, 2017
• Getting Started with Blue Ocean's Activity View

  This is a guest post by Liam Newman, Technical Evangelist at CloudBees. Blue Ocean is a new user experience for Jenkins, and version 1.0 is now live! Blue Ocean makes Jenkins, and continuous delivery, approachable to all team members. In my previous post, I showed how easy it is to create and edit Declarative Pipelines using the Blue Ocean Visual Pipeline Editor. In this video, I’ll use...

  

  Liam Newman April 11, 2017
• New, safer CLI in 2.54

  In response to the zero-day vulnerability we fixed in November, I wrote the following: Moving forward, the Jenkins security team is revisiting the design of the Jenkins CLI over the coming weeks to prevent this class of vulnerability in the future. If you are interested in participating in that discussion, please join in on the jenkinsci-dev@ mailing list. In early February, several project...

  Daniel Beck April 11, 2017