jenkins.baseline
to reduce bom update mistakes by @strangelookingnerd in #118Full Changelog: https://github.com/jenkinsci/sysdig-secure-plugin/compare/sysdig-secure-3.0.1...sysdig-secure-3.0.2
jenkins-plugin-cli --plugins sysdig-secure:3.0.2
Full Changelog: https://github.com/jenkinsci/sysdig-secure-plugin/compare/sysdig-secure-3.0.0...sysdig-secure-3.0.1
jenkins-plugin-cli --plugins sysdig-secure:3.0.1
We're excited to announce the new version of the Sysdig Jenkins Plugin for vulnerability scanning and compliance.
This release focuses on enhancing stability, security, and adopting a modular architecture. We've upgraded Infrastructure as Code (IaC) scanning and removed the old scanning engine to simplify the code, making it easier to maintain and improve.
Legacy Scanning Engine Removal: The old scanning engine has been removed. You must update your pipeline steps to use the new scanning engine. For more details, check the configuration documentation here: Jenkins Integration Documentation.
Reconfiguration Required: The plugin's configuration structure has changed, which means existing settings won't be compatible anymore. You will need to reconfigure the plugin, updating critical settings like the URL and API token. Please refer to the linked documentation for detailed steps.
Removed Docker Dependency: With the removal of the old scanning engine, Docker is no longer required π. The plugin is now compatible with all container engines supported by the CLI scanner.
Pinned Scanner Version: The scanner version is now pinned to the latest tested version included in the plugin, rather than using a rolling "latest" version. This improves stability and prevents unexpected issues.
IaC Scanning Improvements:
Bugfix for Multiple VM Image Scanning Steps: Previously, if you added multiple VM image scanning steps in the same job, the plugin displayed two buttons linking to the same report, which was always the latest one. Now, each button correctly points to its own report, showing vulnerabilities for each specific image.
Logging Improvements: Logs are now streamed directly from the CLI scanner to Jenkins, eliminating the need for temporary storage and providing faster, real-time feedback.
Master-Worker E2E Testing: Added simpler end-to-end (e2e) tests to ensure the plugin operates correctly in a master-worker setup, improving reliability during remote worker execution.
Hexagonal Architecture β¬’: The codebase has been restructured to follow a hexagonal architecture, making the code more modular and easier to maintain, which will simplify future updates.
Modernized Plugin Code: The plugin's code has been updated to comply with the latest Jenkins plugin standards, making future maintenance and enhancements more efficient.
Scanner Invocation Refactor: The way scanner commands are constructed has been improved. We replaced the old, error-prone method with a process builder to ensure that scanner options are consistently applied, regardless of the order.
Full Changelog: https://github.com/jenkinsci/sysdig-secure-plugin/compare/sysdig-secure-2.3.5...sysdig-secure-3.0.0
jenkins-plugin-cli --plugins sysdig-secure:3.0.0
Full Changelog: https://github.com/jenkinsci/sysdig-secure-plugin/compare/sysdig-secure-2.3.4...sysdig-secure-2.3.5
jenkins-plugin-cli --plugins sysdig-secure:2.3.5
πΌ Java and Jenkins Version Requirements Raised: While the minimum supported Java version has been raised to 11+ and Jenkins to version 2.440.3 LTS, this is not considered a breaking change. If your Jenkins instance does not meet these requirements, the newer plugin version will simply not be installed. Users with older versions of Jenkins will need to upgrade their Jenkins environment to receive plugin updates.
π
Upcoming Breaking Change: We are working on removing legacy scanner support from the Jenkins plugin in a future release. This will be a breaking change for customers still using the legacy scanner. If you rely on the legacy scanner, we will advise you to pin to the previous version of the plugin once the change is made.
It is not yet decided whether a dedicated support branch for the legacy scanner will be created, as most customers have already migrated to the new scanner.
A major security overhaul was completed in this release, resolving 48 vulnerabilities:
Full Changelog: https://github.com/jenkinsci/sysdig-secure-plugin/compare/sysdig-secure-2.3.3...sysdig-secure-2.3.4
jenkins-plugin-cli --plugins sysdig-secure:2.3.4
Full Changelog: https://github.com/jenkinsci/sysdig-secure-plugin/compare/sysdig-secure-2.3.2...sysdig-secure-2.3.3
jenkins-plugin-cli --plugins sysdig-secure:2.3.3
This release Includes the following changes:
jenkins-plugin-cli --plugins sysdig-secure:2.3.2
This release Includes the changes included in the following PRs:
1.9.2
jenkins-plugin-cli --plugins sysdig-secure:2.3.1
Bump of the internal cli-scanner
to version 1.5.0, adding the following capabilities:
jenkins-plugin-cli --plugins sysdig-secure:2.3.0
cli-scanner
to 1.3.6Custom Version
at the global config level in the UI - customCliVersion
at job level) to have the possibility to specify and use a specific version of the scanner instead of the default oneβ οΈ Using a custom version of the scanner could possibly cause compatibility issues (especially for reports), so use it at your own risk.
jenkins-plugin-cli --plugins sysdig-secure:2.2.9
jenkins-plugin-cli --plugins sysdig-secure:2.2.8
jenkins-plugin-cli --plugins sysdig-secure:2.2.7
jenkins-plugin-cli --plugins sysdig-secure:2.2.6
jenkins-plugin-cli --plugins sysdig-secure:2.2.5
jenkins-plugin-cli --plugins sysdig-secure:2.1.16
jenkins-plugin-cli --plugins sysdig-secure:2.1.15
jenkins-plugin-cli --plugins sysdig-secure:2.1.14
jenkins-plugin-cli --plugins sysdig-secure:2.1.13
jenkins-plugin-cli --plugins sysdig-secure:2.1.12
jenkins-plugin-cli --plugins sysdig-secure:2.1.11
jenkins-plugin-cli --plugins sysdig-secure:2.1.10
jenkins-plugin-cli --plugins sysdig-secure:2.1.9
jenkins-plugin-cli --plugins sysdig-secure:2.1.8
jenkins-plugin-cli --plugins sysdig-secure:2.1.7
jenkins-plugin-cli --plugins sysdig-secure:2.1.6
jenkins-plugin-cli --plugins sysdig-secure:2.1.5
jenkins-plugin-cli --plugins sysdig-secure:2.1.4
jenkins-plugin-cli --plugins sysdig-secure:2.1.3
jenkins-plugin-cli --plugins sysdig-secure:2.1.2
jenkins-plugin-cli --plugins sysdig-secure:2.1.1
jenkins-plugin-cli --plugins sysdig-secure:2.1.0
jenkins-plugin-cli --plugins sysdig-secure:2.0.3
jenkins-plugin-cli --plugins sysdig-secure:2.0.2
jenkins-plugin-cli --plugins sysdig-secure:2.0.0
jenkins-plugin-cli --plugins sysdig-secure:1.0.19.3