How can i remove the plugin's warning?

16 views
Skip to first unread message

liuweiGL

unread,
Apr 11, 2020, 10:51:30 PM4/11/20
to Jenkins Developers
The warning: https://jenkins.io/security/advisory/2019-10-01/#SECURITY-1423

After the 2.0 version i had used Secret class to declare variable, for example:

微信图片_20200412104927.png

Why does the warning still exist?

Gavin Mogan

unread,
Apr 11, 2020, 11:00:17 PM4/11/20
to Jenkins Developers
The advisory doesn't go away, its to let people know that certain versions had issues and they should update

I think https://github.com/jenkins-infra/update-center2/blob/301978d41a2822385acb0c5c4cfd022218c5f939/src/main/resources/warnings.json#L6020-L6032 says its fixed in versions newer than 1.9, so 2.0 shouldn't get warnings in update center.

Either way, security team can say more.

Gavin

--
You received this message because you are subscribed to the Google Groups "Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-de...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-dev/ffbb5f6d-061e-48e8-bd43-659ac794e660%40googlegroups.com.

Daniel Beck

unread,
Apr 12, 2020, 3:03:58 PM4/12/20
to jenkin...@googlegroups.com


> On 12. Apr 2020, at 04:51, liuweiGL <liuwe...@gmail.com> wrote:
>
> Why does the warning still exist?

These warnings don't get updated automatically.

See the documentation here for how you can request changes to warnings: https://jenkins.io/security/plugins/#followup

liuweiGL

unread,
Apr 12, 2020, 9:08:10 PM4/12/20
to Jenkins Developers
Thanks, this is what I need.

在 2020年4月13日星期一 UTC+8上午3:03:58,Daniel Beck写道:
Reply all
Reply to author
Forward
0 new messages