[Bug 27175] New: Jenkins instance exposed to public
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=27175 Bug ID: 27175 Summary: Jenkins instance exposed to public Change sponsored?: --- Product: Project Infrastructure Version: unspecified Hardware: All OS: All Status: NEW Severity: critical Priority: P5 - low Component: Continuous Integration Assignee: tomascohen@gmail.com Reporter: farmankhan977@gmail.com Created attachment 114267 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=114267&action=edit jenkins4koha hi team during recon i found here https://jenkins.koha-community.org/view/supported/builds that your jenkins instance is exposed to public which should be private. -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=27175 Mason James <mtj@kohaaloha.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |In Discussion CC| |mtj@kohaaloha.com --- Comment #1 from Mason James <mtj@kohaaloha.com> --- (In reply to Furman Khan from comment #0)
Created attachment 114267 [details] jenkins4koha
hi team during recon i found here https://jenkins.koha-community.org/view/supported/builds that your jenkins instance is exposed to public which should be private.
hi Furman, the jenkins.io project has it's instances public, so we can safely follow it's example? https://ci.jenkins.io/computer/ https://ci.jenkins.io/view/Projects/builds -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=27175 Jonathan Druart <jonathan.druart@bugs.koha-community.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jonathan.druart@bugs.koha-c | |ommunity.org --- Comment #2 from Jonathan Druart <jonathan.druart@bugs.koha-community.org> --- That's the expected behaviour, why should not they be public? -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=27175 David Cook <dcook@prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dcook@prosentient.com.au --- Comment #3 from David Cook <dcook@prosentient.com.au> --- I don't think that this is a genuine issue. If there is a documented security vulnerability, it should be reported as a security bug instead. -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=27175 Jonathan Druart <jonathan.druart@bugs.koha-community.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|In Discussion |RESOLVED Resolution|--- |INVALID -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=27175 Furman Khan <farmankhan977@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #114267|0 |1 is obsolete| | -- You are receiving this mail because: You are watching all bug changes.
participants (1)
-
bugzilla-daemon@bugs.koha-community.org