Hi,

I want to execute a plugin using Jenkinsfile pipeline and I want that
plugin to have the context (branch & job) without user interference. This
plugin generates a token identifying the job so we can authenticate with
other services.
If I allow users to set the branch as env var, then the token content is
compromised and my plugin is insecure. This is critical to developing a
secure self-service CI/CD. How can I do it?

Thanks

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/CAMa-MX%2Bs-jhngF%2BWBvVd--gsg_KOUUDU%2BgLj5RLOU%3D%2Bg4Gp%3D3A%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to