diff --git a/.github/renovate.json5 b/.github/renovate.json5 index 4d38585..b81b566 100644 --- a/.github/renovate.json5 +++ b/.github/renovate.json5 @@ -6,4 +6,21 @@ "github>strg-at/renovate-config//pre-commit/silent-automerge.json5", "github>strg-at/renovate-config//terraform/silent-automerge.json5", ], + packageRules: [ + // { + // description: "automergeSchedule: jenkins-plugins", + // matchDatasources: ["jenkins-plugins"], + // automergeSchedule: [ + // "after 10pm every weekday", + // "before 7am every weekday", + // ], + // }, + { + description: "jenkins-plugins: disable pr and automerge", + matchDatasources: ["jenkins-plugins"], + separateMinorPatch: false, + automerge: false, + dependencyDashboardApproval: true, + }, + ], } diff --git a/.gitleaksignore b/.gitleaksignore new file mode 100644 index 0000000..3990545 --- /dev/null +++ b/.gitleaksignore @@ -0,0 +1,23 @@ +jenkins/plugins.txt:generic-api-key:27 +jenkins/plugins.txt:generic-api-key:28 +jenkins/plugins.txt:generic-api-key:30 +jenkins/plugins.txt:generic-api-key:37 +jenkins/plugins.txt:generic-api-key:40 +jenkins/plugins.txt:generic-api-key:41 +jenkins/plugins.txt:generic-api-key:43 +jenkins/plugins.txt:generic-api-key:53 +jenkins/plugins.txt:generic-api-key:55 +jenkins/plugins.txt:generic-api-key:57 +jenkins/plugins.txt:generic-api-key:61 +jenkins/plugins.txt:generic-api-key:62 +jenkins/plugins.txt:generic-api-key:73 +jenkins/plugins.txt:generic-api-key:74 +jenkins/plugins.txt:generic-api-key:78 +jenkins/plugins.txt:generic-api-key:81 +jenkins/plugins.txt:generic-api-key:82 +jenkins/plugins.txt:generic-api-key:85 +jenkins/plugins.txt:generic-api-key:86 +jenkins/plugins.txt:generic-api-key:88 +jenkins/plugins.txt:generic-api-key:103 +jenkins/plugins.txt:generic-api-key:112 +jenkins/plugins.txt:generic-api-key:122 diff --git a/jenkins/Dockerfile b/jenkins/Dockerfile index 277de00..2c015c5 100644 --- a/jenkins/Dockerfile +++ b/jenkins/Dockerfile @@ -7,9 +7,9 @@ RUN curl https://packages.cloud.google.com/apt/doc/apt-key.gpg | gpg --dearmor - # install base packages RUN apt update && apt install rsync wget python3 \ - build-essential clang libssl-dev zlib1g-dev libbz2-dev libreadline-dev libsqlite3-dev \ - curl llvm libncursesw5-dev xz-utils tk-dev libxml2-dev libxmlsec1-dev libffi-dev \ - liblzma-dev python3 google-cloud-cli google-cloud-sdk-gke-gcloud-auth-plugin lsb-release -y + build-essential clang libssl-dev zlib1g-dev libbz2-dev libreadline-dev libsqlite3-dev \ + curl llvm libncursesw5-dev xz-utils tk-dev libxml2-dev libxmlsec1-dev libffi-dev \ + liblzma-dev python3 google-cloud-cli google-cloud-sdk-gke-gcloud-auth-plugin lsb-release -y # prepare installation of php packages RUN curl -fsSL https://packages.sury.org/php/apt.gpg | tee /etc/apt/trusted.gpg.d/sury.gpg > /dev/null && \ @@ -42,3 +42,7 @@ USER jenkins RUN curl https://pyenv.run | bash && \ CC=clang ~/.pyenv/bin/pyenv install 3.6.8 && \ ~/.pyenv/bin/pyenv virtualenv 3.6.8 timeline-service-venv + +# install plugins +COPY plugins.txt /usr/share/jenkins/ref/plugins.txt +RUN jenkins-plugin-cli -f /usr/share/jenkins/ref/plugins.txt diff --git a/jenkins/plugins.txt b/jenkins/plugins.txt new file mode 100644 index 0000000..e08f94b --- /dev/null +++ b/jenkins/plugins.txt @@ -0,0 +1,138 @@ +antisamy-markup-formatter:162.v0e6ec0fcfcf6 +apache-httpcomponents-client-4-api:4.5.14-208.v438351942757 +asm-api:9.7.1-97.v4cc844130d97 +authentication-tokens:1.119.v50285141b_7e1 +basic-branch-build-strategies:81.v05e333931c7d +blueocean-bitbucket-pipeline:1.27.16 +blueocean-commons:1.27.16 +blueocean-config:1.27.16 +blueocean-core-js:1.27.16 +blueocean-dashboard:1.27.16 +blueocean-display-url:2.4.3 +blueocean-events:1.27.16 +blueocean-git-pipeline:1.27.16 +blueocean-github-pipeline:1.27.16 +blueocean-i18n:1.27.16 +blueocean-jira:1.27.16 +blueocean-jwt:1.27.16 +blueocean-personalization:1.27.16 +blueocean-pipeline-api-impl:1.27.16 +blueocean-pipeline-editor:1.27.16 +blueocean-pipeline-scm-api:1.27.16 +blueocean-rest-impl:1.27.16 +blueocean-rest:1.27.16 +blueocean-web:1.27.16 +blueocean:1.27.16 +bootstrap5-api:5.3.3-1 +bouncycastle-api:2.30.1.78.1-248.ve27176eb_46cb_ +branch-api:2.1178.v969d9eb_c728e +build-discarder:139.v05696a_7fe240 +caffeine-api:3.1.8-133.v17b_1ff2e0599 +checks-api:2.2.1 +cloudbees-bitbucket-branch-source:888.v8e6d479a_1730 +cloudbees-folder:6.942.vb_43318a_156b_2 +command-launcher:115.vd8b_301cc15d0 +commons-compress-api:1.26.1-2 +commons-lang3-api:3.17.0-84.vb_b_938040b_078 +commons-text-api:1.12.0-129.v99a_50df237f7 +config-file-provider:978.v8e85886ffdc4 +configuration-as-code:1850.va_a_8c31d3158b_ +credentials-binding:681.vf91669a_32e45 +credentials:1380.va_435002fa_924 +data-tables-api:2.1.8-1 +display-url-api:2.204.vf6fddd8a_8b_e9 +docker-commons:443.v921729d5611d +docker-workflow:580.vc0c340686b_54 +durable-task:577.v2a_8a_4b_7c0247 +echarts-api:5.5.1-2 +eddsa-api:0.3.0-4.v84c6f0f4969e +favorite:2.221.v19ca_666b_62f5 +font-awesome-api:6.6.0-2 +git:5.5.2 +git-client:5.0.0 +github-api:1.321-468.v6a_9f5f2d5a_7e +github-branch-source:1797.v86fdb_4d57d43 +github-oauth:597.ve0c3480fcb_d0 +github:1.40.0 +gson-api:2.11.0-85.v1f4e87273c33 +handy-uri-templates-2-api:2.1.8-30.v7e777411b_148 +htmlpublisher:1.36 +instance-identity:201.vd2a_b_5a_468a_a_6 +ionicons-api:74.v93d5eb_813d5f +jackson2-api:2.17.0-379.v02de8ec9f64c +jakarta-activation-api:2.1.3-1 +jakarta-mail-api:2.1.3-1 +javadoc:280.v050b_5c849f69 +javax-activation-api:1.2.0-7 +javax-mail-api:1.6.2-10 +jaxb:2.3.9-1 +jdk-tool:80.v8a_dee33ed6f0 +jenkins-design-language:1.27.16 +jersey2-api:2.44-151.v6df377fff741 +jira:3.13 +jjwt-api:0.11.5-112.ve82dfb_224b_a_d +joda-time-api:2.13.0-93.v9934da_29b_a_e9 +jquery3-api:3.7.1-2 +json-api:20240303-101.v7a_8666713110 +jsch:0.2.16-86.v42e010d9484b_ +json-path-api:2.9.0-118.v7f23ed82a_8b_8 +junit:1304.vc85a_b_ca_96613 +kubernetes:4292.v11898cf8fa_66 +kubernetes-client-api:6.10.0-240.v57880ce8b_0b_2 +kubernetes-credentials:190.v03c305394deb_ +lockable-resources:1320.v1f0dff578476 +mailer:488.v0c9639c1a_eb_3 +matrix-auth:3.2.2 +matrix-project:839.vff91cd7e3a_b_2 +metrics:4.2.21-458.vcf496cb_839e4 +mina-sshd-api-common:2.14.0-133.vcc091215a_358 +mina-sshd-api-core:2.14.0-133.vcc091215a_358 +nodejs:1.6.2 +okhttp-api:4.11.0-172.vda_da_1feeb_c6e +pipeline-build-step:540.vb_e8849e1a_b_d8 +pipeline-github-lib:61.v629f2cc41d83 +pipeline-graph-analysis:216.vfd8b_ece330ca_ +pipeline-groovy-lib:740.va_2701257fe8d +pipeline-input-step:495.ve9c153f6067b_ +pipeline-milestone-step:119.vdfdc43fc3b_9a_ +pipeline-model-api:2.2214.vb_b_34b_2ea_9b_83 +pipeline-model-definition:2.2214.vb_b_34b_2ea_9b_83 +pipeline-model-extensions:2.2214.vb_b_34b_2ea_9b_83 +pipeline-rest-api:2.34 +pipeline-stage-step:312.v8cd10304c27a_ +pipeline-stage-tags-metadata:2.2214.vb_b_34b_2ea_9b_83 +pipeline-stage-view:2.34 +pipeline-utility-steps:2.18.0 +plain-credentials:183.va_de8f1dd5a_2b_ +plugin-util-api:4.1.0 +prism-api:1.29.0-18 +pubsub-light:1.18 +pyenv-pipeline:2.1.2 +resource-disposer:0.24 +scm-api:696.v778d637b_a_762 +script-security:1365.v4778ca_84b_de5 +shiningpanda:0.24 +slack:751.v2e44153c8fe1 +snakeyaml-api:2.3-123.v13484c65210a_ +sse-gateway:1.27 +ssh-agent:376.v8933585c69d3 +ssh-credentials:343.v884f71d78167 +sshd:3.330.vc866a_8389b_58 +structs:338.v848422169819 +terraform:1.0.10 +thinBackup:2.1.1 +timestamper:1.27 +token-macro:400.v35420b_922dcb_ +trilead-api:2.147.vb_73cc728a_32e +variant:60.v7290fc0eb_b_cd +workflow-aggregator:600.vb_57cdd26fdd7 +workflow-api:1336.vee415d95c521 +workflow-basic-steps:1058.vcb_fc1e3a_21a_9 +workflow-cps:3975.v567e2a_1ffa_22 +workflow-durable-task-step:1371.vb_7cec8f3b_95e +workflow-job:1436.vfa_244484591f +workflow-multibranch:795.ve0cb_1f45ca_9a_ +workflow-scm-step:427.v4ca_6512e7df1 +workflow-step-api:678.v3ee58b_469476 +workflow-support:926.v9f4f9b_b_98c19 +ws-cleanup:0.47