Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-58683

Builds from untrusted source on Branch Indexing

XMLWordPrintable

      Using the same configuration as is detailed in JENKINS-58618, I am also finding that PRs that should not be built because they are from untrusted sources will get built during the Branch Indexing:

      Checking pull request #814
       (not from a trusted source)
       'Jenkinsfile' found
       Met criteria
      Changes detected: PR-814 (null → [redacted])
      Connecting to https://api.github.com to check permissions of obtain list of [redacted] for [redacted]/[redacted]
      Loading trusted files from base branch master at [redacted] rather than [redacted]
      Scheduled build for branch: PR-814
      

      You can see that it was determined to be untrusted and reverted to the Jenkinsfile from the origin instead of the PR, but shouldn't the setting in:

      https://issues.jenkins-ci.org/secure/attachment/48061/image-2019-07-23-10-30-22-210.png

      mean that it's not even run at all?

            Unassigned Unassigned
            brianjmurrell Brian J Murrell
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated: