{"id":13523229,"url":"https://github.com/dev-sec/chef-jenkins-hardening","last_synced_at":"2025-04-01T00:31:07.015Z","repository":{"id":17915428,"uuid":"20880279","full_name":"dev-sec/chef-jenkins-hardening","owner":"dev-sec","description":"⛔ DEPRECATED: A secure jenkins installation","archived":true,"fork":false,"pushed_at":"2019-07-23T12:31:59.000Z","size":35,"stargazers_count":17,"open_issues_count":2,"forks_count":6,"subscribers_count":13,"default_branch":"master","last_synced_at":"2024-08-02T06:14:51.702Z","etag":null,"topics":["chef","chef-cookbook","devops","hardening","jenkins","security"],"latest_commit_sha":null,"homepage":"http://dev-sec.io/","language":"Ruby","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/dev-sec.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-06-16T09:57:12.000Z","updated_at":"2023-01-28T17:44:31.000Z","dependencies_parsed_at":"2022-09-01T01:41:08.877Z","dependency_job_id":null,"html_url":"https://github.com/dev-sec/chef-jenkins-hardening","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dev-sec%2Fchef-jenkins-hardening","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dev-sec%2Fchef-jenkins-hardening/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dev-sec%2Fchef-jenkins-hardening/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dev-sec%2Fchef-jenkins-hardening/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/dev-sec","download_url":"https://codeload.github.com/dev-sec/chef-jenkins-hardening/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":222688173,"owners_count":17023297,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["chef","chef-cookbook","devops","hardening","jenkins","security"],"created_at":"2024-08-01T06:00:57.433Z","updated_at":"2024-11-02T07:31:26.517Z","avatar_url":"https://github.com/dev-sec.png","language":"Ruby","funding_links":[],"categories":["CICDのセキュリティ"],"sub_categories":["6. 運用と監視"],"readme":"# Jenkins Hardening\n\nThis project is DEPRECATED and NO LONGER SUPPORTED. If you think this should really be supported, [reach out](https://dev-sec.io/community/) and we can discuss options.\n\nThis cookbook aims to provide a default jenkins setup that is secure. Specifically it\n\n- installs jenkins behind nginx\n- configures ssl for nginx\n- configures user logins\n- runs jenkins slaves on different servers\n\nCurrently this cookbook is work-in-progress and is not yet considered secure enough for production use.\n\n## Default Plugins\n\nDefault Plugins can be overridden by\n\ndefault['hardening']['jenkins']['plugins']\n\n - [ant](https://wiki.jenkins-ci.org/display/JENKINS/Ant+Plugin)\n - [build-timeout](https://wiki.jenkins-ci.org/display/JENKINS/Build-timeout+Plugin)\n - [credentials](https://wiki.jenkins-ci.org/display/JENKINS/Credentials+Plugin)\n - [git-client](https://wiki.jenkins-ci.org/display/JENKINS/Git+Client+Plugin)\n - [git] (https://wiki.jenkins-ci.org/display/JENKINS/Git+Plugin)\n - [github](https://wiki.jenkins-ci.org/display/JENKINS/Github+Plugin)\n - [github-api](https://wiki.jenkins-ci.org/display/JENKINS/GitHub+API+Plugin)\n - [jquery](https://wiki.jenkins-ci.org/display/JENKINS/jQuery+Plugin)\n - [matrix-auth](https://wiki.jenkins-ci.org/display/JENKINS/Matrix+Authorization+Strategy+Plugin)\n - [maven-plugin](https://wiki.jenkins-ci.org/display/JENKINS/Maven+Project+Plugin)\n - [metrics](https://wiki.jenkins-ci.org/display/JENKINS/Metrics+Plugin)\n - [rvm](https://wiki.jenkins-ci.org/display/JENKINS/RVM+Plugin)\n - [simple-theme-plugin](https://wiki.jenkins-ci.org/display/JENKINS/Simple+Theme+Plugin)\n - [swarm](https://wiki.jenkins-ci.org/display/JENKINS/Swarm+Plugin)\n - [windows-slaves](https://wiki.jenkins-ci.org/display/JENKINS/Windows+Slaves+Plugin)\n\n\n## Jenkins Slaves\n\n### Windows\n\nhttps://wiki.jenkins-ci.org/display/JENKINS/Step+by+step+guide+to+set+up+master+and+slave+machines\n\n# Usage\n\nThis cookbook is optimized for a usage with [chef-os-hardening](https://github.com/TelekomLabs/chef-os-hardening) and [chef-ssh-hardening](https://github.com/TelekomLabs/chef-ssh-hardening), but has no direct dependency. Therefore this cookbook is even happy without them.\n\n# Test\n\n```bash\n# Install dependencies\ngem install bundler\nbundle install\n\n# Do lint checks\nbundle exec rake lint\n\n# Kitchen test\nbundle exec kitchen list\nbundle exec kitchen test default-ubuntu-1204\n\n```\n\n## References\n\n- [Securing Jenkins](http://slideshare.net/cloudbees/securing-jenkins)\n\n## Contributing\n\nSee [contributor guideline](CONTRIBUTING.md).\n\n## License and Author\n\n* Author:: Christoph Hartmann \u003cchris@lollyrock.com\u003e\n* Author:: Trent Petersen \u003ctrent.petersen@convergint.com\u003e\n* Author:: Deutsche Telekom AG\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdev-sec%2Fchef-jenkins-hardening","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdev-sec%2Fchef-jenkins-hardening","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdev-sec%2Fchef-jenkins-hardening/lists"}