[Qa-jenkins-scm] [Git][qa/jenkins.debian.net][master] try to not require the access token when git triggering a poll

[Mattia Rizzolo (@mattia)]

Mattia Rizzolo pushed to branch master at Debian QA / jenkins.debian.net


Commits:
2becb445 by Mattia Rizzolo at 2022-09-07T16:55:24+02:00
try to not require the access token when git triggering a poll

this was in response of https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-284

but since we don't use the sha1= functionality (AFAIK) we are not
affected by this, and we care lower the requirement to not require such
token for a simple polling

See also https://github.com/jenkinsci/git-plugin/pull/1299

Signed-off-by: Mattia Rizzolo <mattia at debian.org>

- - - - -


1 changed file:

- hosts/jenkins/etc/default/jenkins


Changes:

=====================================
hosts/jenkins/etc/default/jenkins
=====================================
@@ -34,6 +34,10 @@ JAVA_ARGS="$JAVA_ARGS -XX:+UseG1GC "
 #JAVA_ARGS="-Djava.net.preferIPv4Stack=true"
 JAVA_ARGS="$JAVA_ARGS -Dhudson.DNSMultiCast.disabled=true"
 
+# disable git plugin's token requirement
+# https://plugins.jenkins.io/git/#plugin-content-push-notification-from-repository
+JAVA_ARGS="$JAVA_ARGS -Dhudson.plugins.git.GitStatus.NOTIFY_COMMIT_ACCESS_CONTROL=disabled-for-polling"
+
 PIDFILE=/var/run/$NAME/$NAME.pid
 
 # user and group to be invoked as (default to jenkins)



View it on GitLab: https://salsa.debian.org/qa/jenkins.debian.net/-/commit/2becb4458bbd92abe8fc5d34eb34e5f89aa3d49b

-- 
View it on GitLab: https://salsa.debian.org/qa/jenkins.debian.net/-/commit/2becb4458bbd92abe8fc5d34eb34e5f89aa3d49b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/qa-jenkins-scm/attachments/20220907/daccd8a5/attachment.htm>