Branch: refs/heads/master Home: https://github.com/jenkinsci/workflow-plugin Commit: eacdfc1715aaabbd3b882d713129b0fa99486710 https://github.com/jenkinsci/workflow-plugin/commit/eacdfc1715aaabbd3b882d713129b0fa99486710 Author: Kohsuke Kawaguchi <k...@kohsuke.org> Date: 2014-10-02 (Thu, 02 Oct 2014)
Changed paths: M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsFlowDefinition.java M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsFlowExecution.java M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsThread.java A cps/src/main/java/org/jenkinsci/plugins/workflow/cps/SandboxContinuable.java Log Message: ----------- Sketch of script sandbox integration Commit: 5afae6a8b7bfe01394016eb992747085467066c4 https://github.com/jenkinsci/workflow-plugin/commit/5afae6a8b7bfe01394016eb992747085467066c4 Author: Kohsuke Kawaguchi <k...@kohsuke.org> Date: 2014-10-02 (Thu, 02 Oct 2014) Changed paths: A cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsWhitelist.java M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/SandboxContinuable.java Log Message: ----------- Bit more realistic whitelist Commit: 7869626c90d76e8eabd66e80d80b4ea1ff45e944 https://github.com/jenkinsci/workflow-plugin/commit/7869626c90d76e8eabd66e80d80b4ea1ff45e944 Author: Kohsuke Kawaguchi <k...@kohsuke.org> Date: 2014-10-02 (Thu, 02 Oct 2014) Changed paths: M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/SandboxContinuable.java Log Message: ----------- pointless rethrow Commit: f0e1ceec8a1cf7a056396ed20d7e421a972e1961 https://github.com/jenkinsci/workflow-plugin/commit/f0e1ceec8a1cf7a056396ed20d7e421a972e1961 Author: Jesse Glick <jgl...@cloudbees.com> Date: 2014-10-02 (Thu, 02 Oct 2014) Changed paths: M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsFlowDefinition.java M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsFlowExecution.java M cps/src/main/resources/org/jenkinsci/plugins/workflow/cps/CpsFlowDefinition/config.jelly Log Message: ----------- Fixing configuration of sandbox field. Commit: 6f0b7a868f994fe0484e07db10b4da0bd7c812ae https://github.com/jenkinsci/workflow-plugin/commit/6f0b7a868f994fe0484e07db10b4da0bd7c812ae Author: Jesse Glick <jgl...@cloudbees.com> Date: 2014-10-02 (Thu, 02 Oct 2014) Changed paths: A cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsWhitelist.java M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/SandboxContinuable.java Log Message: ----------- Merge branch 'script-security' of github.com:jenkinsci/workflow-plugin into script-security Commit: bf1545c0fd5c87fb14a032d3744979bf387b5a29 https://github.com/jenkinsci/workflow-plugin/commit/bf1545c0fd5c87fb14a032d3744979bf387b5a29 Author: Kohsuke Kawaguchi <k...@kohsuke.org> Date: 2014-10-02 (Thu, 02 Oct 2014) Changed paths: M aggregator/src/test/groovy/org/jenkinsci/plugins/workflow/WorkflowJobNonRestartingTest.groovy Log Message: ----------- Resurrecting a test case from WiP local branch Commit: 24cf18d3340ad215bf238b2924d172c0a55dfde2 https://github.com/jenkinsci/workflow-plugin/commit/24cf18d3340ad215bf238b2924d172c0a55dfde2 Author: Kohsuke Kawaguchi <k...@kohsuke.org> Date: 2014-10-02 (Thu, 02 Oct 2014) Changed paths: M aggregator/src/test/groovy/org/jenkinsci/plugins/workflow/WorkflowJobNonRestartingTest.groovy M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsFlowExecution.java M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsThread.java Log Message: ----------- Fixing up compiler errors Commit: b89d5a26753e9d55d57853edaeeb8a9c84b626a5 https://github.com/jenkinsci/workflow-plugin/commit/b89d5a26753e9d55d57853edaeeb8a9c84b626a5 Author: Jesse Glick <jgl...@cloudbees.com> Date: 2014-10-02 (Thu, 02 Oct 2014) Changed paths: M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/SandboxContinuable.java Log Message: ----------- Need to call accessRejected if the method is not whitelisted. Commit: 6d40f460a6220d1ebd1f070155da2ab465c91288 https://github.com/jenkinsci/workflow-plugin/commit/6d40f460a6220d1ebd1f070155da2ab465c91288 Author: Jesse Glick <jgl...@cloudbees.com> Date: 2014-10-02 (Thu, 02 Oct 2014) Changed paths: M aggregator/src/test/groovy/org/jenkinsci/plugins/workflow/WorkflowJobNonRestartingTest.groovy M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsFlowExecution.java M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsThread.java Log Message: ----------- Merge branch 'script-security' of github.com:jenkinsci/workflow-plugin into script-security Commit: 0bc618a03257fd09313fa4f47f8ec1b5583d39c6 https://github.com/jenkinsci/workflow-plugin/commit/0bc618a03257fd09313fa4f47f8ec1b5583d39c6 Author: Jesse Glick <jgl...@cloudbees.com> Date: 2014-10-02 (Thu, 02 Oct 2014) Changed paths: M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsFlowDefinition.java Log Message: ----------- Another call to configuring should be skipped when in sandbox mode. Commit: bd62e4ffc23589d5d6974abc94b1434cf16d03eb https://github.com/jenkinsci/workflow-plugin/commit/bd62e4ffc23589d5d6974abc94b1434cf16d03eb Author: Jesse Glick <jgl...@cloudbees.com> Date: 2014-10-02 (Thu, 02 Oct 2014) Changed paths: R cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsWhitelist.java M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/SandboxContinuable.java Log Message: ----------- No apparent need for CpsWhitelist. Commit: e62ef53b911df8a48929a863e9058d337bf726b1 https://github.com/jenkinsci/workflow-plugin/commit/e62ef53b911df8a48929a863e9058d337bf726b1 Author: Kohsuke Kawaguchi <k...@kohsuke.org> Date: 2014-10-02 (Thu, 02 Oct 2014) Changed paths: M pom.xml Log Message: ----------- Needs a newer version of script-security ... which bundles newer version of groovy-sandbox Commit: f9d076f97d735e50f35bf45cecc5421f7a6f4e84 https://github.com/jenkinsci/workflow-plugin/commit/f9d076f97d735e50f35bf45cecc5421f7a6f4e84 Author: Jesse Glick <jgl...@cloudbees.com> Date: 2014-10-02 (Thu, 02 Oct 2014) Changed paths: M aggregator/src/test/groovy/org/jenkinsci/plugins/workflow/WorkflowJobNonRestartingTest.groovy Log Message: ----------- Verify that we can call a method defined in our script without special approval. To make this pass, see wrapperWhitelist in: https://github.com/jenkinsci/script-security-plugin/commit/6b2c8b6 Commit: 2ba273b82005f2cc4adcec9ca6b42185089a3bd8 https://github.com/jenkinsci/workflow-plugin/commit/2ba273b82005f2cc4adcec9ca6b42185089a3bd8 Author: Jesse Glick <jgl...@cloudbees.com> Date: 2014-10-02 (Thu, 02 Oct 2014) Changed paths: M pom.xml Log Message: ----------- Merge branch 'script-security' of github.com:jenkinsci/workflow-plugin into script-security Commit: ee5fb124e510f0ebe9b73c16efa40780f46b0998 https://github.com/jenkinsci/workflow-plugin/commit/ee5fb124e510f0ebe9b73c16efa40780f46b0998 Author: Jesse Glick <jgl...@cloudbees.com> Date: 2014-10-02 (Thu, 02 Oct 2014) Changed paths: M CHANGES.md M README.md M aggregator/pom.xml M api/pom.xml M basic-steps/pom.xml M cps/pom.xml M demo/Makefile A demo/snapshot/Dockerfile M durable-task-step/pom.xml M job/pom.xml M pom.xml M scm-step/pom.xml M step-api/pom.xml M support/pom.xml Log Message: ----------- Merge branch 'master' into script-security Commit: 8718dc3ea44eb62aff87e95b8a3cab26a1c27c1e https://github.com/jenkinsci/workflow-plugin/commit/8718dc3ea44eb62aff87e95b8a3cab26a1c27c1e Author: Jesse Glick <jgl...@cloudbees.com> Date: 2014-10-02 (Thu, 02 Oct 2014) Changed paths: M pom.xml Log Message: ----------- Comment. Commit: 6cac672e1a08e233fd48bf213de2d0c24bd38014 https://github.com/jenkinsci/workflow-plugin/commit/6cac672e1a08e233fd48bf213de2d0c24bd38014 Author: Kohsuke Kawaguchi <k...@kohsuke.org> Date: 2014-10-02 (Thu, 02 Oct 2014) Changed paths: M cps/pom.xml M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsFlowExecution.java Log Message: ----------- To execute CPS-transformed code through sandbox interceptor, those two needs to collaborate. The custom invoker makes sure that CPS interpreter doesn't call into Groovy methods directly, and instead goes through sandbox checker Commit: d517cc075d3eb8d638e180fab65950ae4b508647 https://github.com/jenkinsci/workflow-plugin/commit/d517cc075d3eb8d638e180fab65950ae4b508647 Author: Kohsuke Kawaguchi <k...@kohsuke.org> Date: 2014-10-02 (Thu, 02 Oct 2014) Changed paths: M aggregator/src/test/groovy/org/jenkinsci/plugins/workflow/WorkflowJobNonRestartingTest.groovy M cps/pom.xml M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/BodyInvoker.java M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsFlowExecution.java M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsScript.java M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsThread.java M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsThreadGroup.java A cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsWhitelist.java M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/SandboxContinuable.java Log Message: ----------- Fixed loose-ends in script security integration - everything defined in user script is OK to invoke, which means we need to keep track of the classloader used to load them - new CpsThread created via body invoaction of a step needs to execute in the sandbox mode Commit: 44b079318113a6b2c9e9097de78be1753a93cc5c https://github.com/jenkinsci/workflow-plugin/commit/44b079318113a6b2c9e9097de78be1753a93cc5c Author: Kohsuke Kawaguchi <k...@kohsuke.org> Date: 2014-10-02 (Thu, 02 Oct 2014) Changed paths: M aggregator/src/test/groovy/org/jenkinsci/plugins/workflow/WorkflowJobNonRestartingTest.groovy Log Message: ----------- Using a method that's more likely rejected. Object.toString() might get approved out of the box because it sounds benign Commit: fc951261efea144a152876bcab9acdcd08ca6604 https://github.com/jenkinsci/workflow-plugin/commit/fc951261efea144a152876bcab9acdcd08ca6604 Author: Kohsuke Kawaguchi <k...@kohsuke.org> Date: 2014-10-02 (Thu, 02 Oct 2014) Changed paths: M pom.xml Log Message: ----------- Relying on a released version Commit: ab1684000d1f67fe4ae49c51bc531858e9c7ed75 https://github.com/jenkinsci/workflow-plugin/commit/ab1684000d1f67fe4ae49c51bc531858e9c7ed75 Author: Kohsuke Kawaguchi <k...@kohsuke.org> Date: 2014-10-02 (Thu, 02 Oct 2014) Changed paths: M aggregator/src/test/groovy/org/jenkinsci/plugins/workflow/WorkflowJobNonRestartingTest.groovy M cps/pom.xml M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/BodyInvoker.java M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsFlowDefinition.java M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsFlowExecution.java M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsScript.java M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsThread.java M cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsThreadGroup.java A cps/src/main/java/org/jenkinsci/plugins/workflow/cps/CpsWhitelist.java A cps/src/main/java/org/jenkinsci/plugins/workflow/cps/SandboxContinuable.java M cps/src/main/resources/org/jenkinsci/plugins/workflow/cps/CpsFlowDefinition/config.jelly M pom.xml Log Message: ----------- Integrated a completed script security integration work Compare: https://github.com/jenkinsci/workflow-plugin/compare/2a140a24b14e...ab1684000d1f -- You received this message because you are subscribed to the Google Groups "Jenkins Commits" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-commits+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.