Re: 2021 priorities for Jenkins - Security

Hi all, We will have a "Securing Jenkins Delivery Pipelines" track at the Jenkins contributor summit on Thursday, Feb 25, noon-1:30PM UTC. - Zoom Link: https://zoom.us/j/95649564362?pwd=eTV1ZVpqVk5PVFY1Wi9uMFJLVFkrdz09 - Passcode: 337043 - Meeting notes:

Re: 2021 priorities for Jenkins - Security

Hi Oleg, Thanks for getting this started! Unfortunately I missed the meeting in which this was discussed, but some of this nicely extends things I tried to get started but simply haven't had the time for. Some thoughts: > Expanding developer tooling. It would help to automate, and, when

Re: 2021 priorities for Jenkins - Security

Getting together to define some secure setup guidelines for users would be useful, too. It's not that helpful that Jenkins and its plugins are more secure if users end up configuring Jenkins insecurely in the first place! On Thu, Jan 21, 2021 at 7:12 AM 'Olblak' via Jenkins Developers wrote: > >

Re: 2021 priorities for Jenkins - Security

Thanks, Oleg for putting down this, I would definitely be interested to chat during the contributor summit about this topic. On Thu, Jan 21, 2021, at 1:48 PM, Oleg Nenashev wrote: > Just a quick follow-up to this thread, there is ongoing discussion about > hosting a contributor summit after

Re: 2021 priorities for Jenkins - Security

Just a quick follow-up to this thread, there is ongoing discussion about hosting a contributor summit after FOSDEM. Should it happen, I suggest having a security track/section there. We had a similar one last year in Brussels, and IIRC it went quite well. Ideas/comments and topic suggestions

2021 priorities for Jenkins - Security

Hi all, To follow-up on the Jenkins Governance meeting we had last week, I'd like to continue the discussion about Jenkins security which was suggested as one of 2021 priorities. In