-
Book Overview & Buying
-
Table Of Contents
-
Feedback & Rating

Jenkins Administrator's Guide
By :

The top 10 search results for jenkins script security
almost always contain a way to disable Script Security. While CloudBees, the maintainer of Jenkins, strongly discourages tampering with, disabling, or destroying Script Security, I think it may make sense in some specific settings.
Some of the most common attack vectors to Jenkins are as follows:
The first issue concerns the infrastructure level, which is beyond Jenkins software's domain of control. The second issue is handled well through the global security model, leveraging AD, OAuth, or other established authentication systems. The third issue is what Script Security addresses.
In a non-trusted environment, such as running on AWS...