Hello dev@, we noticed some fishy logs on our Jenkins and are afraid that a successful attack might have happened. Thus, we are taking security precautions and rotating all credentials and revoking active session.
As part of this process, we have to rotate the GitHub webhook secret. This update requires communication with Apache Infra, which will render Jenkins unusable for PR verification until the secret has been updated on Apache Infras side. Please excuse any inconveniences this may have caused. Best regards, Marco