Open seman opened 7 years ago
Looks like both postbuildscript and scripttrigger have security vulns (as of 2 days ago): https://jenkins.io/security/advisory/2017-04-10/.
They were probably pulled from the jenkins plugin repo until a fix is found. @ktsakalozos may have some insight here as to whether or not we can make those plugins optional.
The cwr build bunlde action will trigger only if there are updates for the bunlde. This check is a script and needs the scripttrigger plugin.
Postbuildscript (I think) is needed for grabbing the test results and present them as unit tests within jenkins.
Not sure right now how we should proceed. We can wait for fixes on the plugins but this leaves the charm broken. We can try to find replacement plugins this has some unknowns. We can (?) force the installation of the scripts and accept the fact that this charm has vulnerabilities.
I keep getting
Failed to install Jenkins plugins
error after deployingcwr-ci
bundle. I also tried toremove-relation
andadd-relation
without a success. Looking at the log, I see the following but I don't why installingpostbuildscript
failed:Full unit-cwr-0.log: https://pastebin.canonical.com/185596/