CrowdStrike Security

What's Changed

[modernization of the jenkins plugin and bug fixes]plugin release-crowdstrike-security-1.2.2 in #5

  • Reformatted the pom.xml file to enhance human readability and simplify understanding.
  • Upgraded the parent POM version to align with the latest best practices.
  • Updated the jenkins version to ensure compatibility with Bill of Materials(BOM) standards.
  • Enabled spotbugs plugin functionality to enforce stricter code validation and enhance code quality.
  • Configured the project to use the JVM target version specified in the parent POM, ensuring consistency.
  • Added buildPlugin functionality to the Jenkins pipeline file, streamlining the build and deployment process.
  • Refactored java code to adhere to standard Java naming conventions, improving code clarity and maintainability.
  • Addressed issues identified by the spotbugs plugin, resulting in cleaner and bug-free java code.

Full Changelog: https://github.com/jenkinsci/crowdstrike-security-plugin/compare/crowdstrike-security-1.2.1...crowdstrike-security-1.2.2


Installation options

✍ Other changes

  • This release only prepares the plugin for next development iteration.

Installation options

🚀 New features and updates

  • Introducing the new "Skip image upload" setting. When selected, the image is not automatically uploaded to CrowdStrike image assessment register docker push to. The plugin only retrieves the image scan report, allowing the use of other tools (e.g. Kaniko) to build and push the image to the register.
  • Update pom.xml to address CVE-2022-45688.

Installation options

🚀 Introducing new plugin CrowdStrike Security for Jenkins.

  • Build automation pipeline supporting Docker and Kubernetes.
  • User can configure Falcon Cloud, ClientID, and Secret from the Jenkins > Configuration page.
  • Plugin will authenticate to Falcon API.
  • For each Jenkins build job, plugin will upload Docker image to Falcon API for Image Assessment.
  • Falcon will scan container image for vulnerabilities, and the resulting report data will be pulled by the plugin.
  • Plugin will display Image Assessment report data in both JSON and HTML formats.
  • User can configure timeout in the unusual event that Falcon API is not reachable over network in acceptable time. In these cases, Jenkins build job will be considered failed.
  • Plugin is supported by all Falcon cloud environments (US, UK, GovCloud, etc.).
  • Docker images scanned via plugin are distinguishable from those scanned by Falcon console or Registry Assessment.
  • Plugin includes support and documentation in the Falcon console.

Installation options