jenkins.branch

Class UntrustedBranchProperty

java.lang.Object

hudson.model.AbstractDescribableImpl<BranchProperty>

jenkins.branch.BranchProperty

jenkins.branch.UntrustedBranchProperty

All Implemented Interfaces:

hudson.model.Describable<BranchProperty>

public class UntrustedBranchProperty
extends BranchProperty

Indicates that the branch contains code changes from authors who do not otherwise have the write access to the repository.

Such code can contain malicious changes, so this flag serves as a signal to allow other Jenkins to set up the build isolation to protect the build infrastructure.

Some examples of where the trusted vs non-trusted distinction becomes important:

• Github pull requests should be non-trusted as they can be created by any user
• A Subversion branching structure such as trunk, branches, tags, sandbox would probably have trunk, branches, tags as trusted and sandbox as untrusted where the Subversion permissions give any authenticated user write access to sandbox but allow the project team to commit to all four locations

Author:

Stephen Connolly, Kohsuke Kawaguchi

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	UntrustedBranchProperty.DescriptorImpl Our Descriptor.

Constructor Summary

Constructors

Constructor and Description
UntrustedBranchProperty()

Method Summary

Methods

Modifier and Type	Method and Description
Map<hudson.model.Descriptor<hudson.tasks.BuildWrapper>,hudson.tasks.BuildWrapper>	configureBuildWrappers(Map<hudson.model.Descriptor<hudson.tasks.BuildWrapper>,hudson.tasks.BuildWrapper> wrappers) This method is an extension point whereby a BranchProperty can filter or enhance the set of BuildWrapper to be used by the branch specific project.
Map<hudson.model.Descriptor<hudson.tasks.Publisher>,hudson.tasks.Publisher>	configurePublishers(Map<hudson.model.Descriptor<hudson.tasks.Publisher>,hudson.tasks.Publisher> publishers) This method is an extension point whereby a BranchProperty can filter or enhance the set of Publisher to be used by the branch specific project.

Methods inherited from class jenkins.branch.BranchProperty

configureJobProperties, getDescriptor

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

UntrustedBranchProperty

public UntrustedBranchProperty()

Method Detail

configurePublishers

public Map<hudson.model.Descriptor<hudson.tasks.Publisher>,hudson.tasks.Publisher> configurePublishers(Map<hudson.model.Descriptor<hudson.tasks.Publisher>,hudson.tasks.Publisher> publishers)

This method is an extension point whereby a BranchProperty can filter or enhance the set of Publisher to be used by the branch specific project.

Overrides:

configurePublishers in class BranchProperty

Parameters:

publishers - the proposed Publishers.

Returns:

the resulting Publishers.

configureBuildWrappers

public Map<hudson.model.Descriptor<hudson.tasks.BuildWrapper>,hudson.tasks.BuildWrapper> configureBuildWrappers(Map<hudson.model.Descriptor<hudson.tasks.BuildWrapper>,hudson.tasks.BuildWrapper> wrappers)

This method is an extension point whereby a BranchProperty can filter or enhance the set of BuildWrapper to be used by the branch specific project.

Overrides:

configureBuildWrappers in class BranchProperty

Parameters:

wrappers - the proposed BuildWrappers.

Returns:

the resulting BuildWrappers.