Skip to content

Commit

Permalink
Suspend Crowd2 plugin distribution - uses closed source dependency
Browse files Browse the repository at this point in the history
jenkins-infra/helpdesk#3854 explains that
the Crowd2 integration plugin uses a dependency that is not open source
licensed.

The Crowd2 integration library is Atlassian licensed as described in
jenkins-infra/helpdesk#3842 (comment)

The Atlassian license is not an open source license.  Refer to
https://www.atlassian.com/legal/software-license-agreement for the
details of the license.

https://www.jenkins.io/project/governance/#license says that the Jenkins
project requires plugins that it distributes to be open source, including
their dependencies.  When a closed source dependency is detected in a
plugin, we suspend distribution of that plugin.  If maintainers update
the plugin to remove the closed source dependency, distribution can
begin for the new release that removes the closed source dependency.

Fixes jenkins-infra/helpdesk#3854
  • Loading branch information
MarkEWaite committed Dec 9, 2023
1 parent da75b84 commit f9eb151
Showing 1 changed file with 8 additions and 1 deletion.
9 changes: 8 additions & 1 deletion resources/artifact-ignores.properties
Original file line number Diff line number Diff line change
Expand Up @@ -402,7 +402,6 @@ [email protected] # While we serve pre-2.7 update sites; depends on
# depends on scripttrigger
xtrigger = https://www.jenkins.io/security/plugins/#suspensions


# These plugins implement Groovy scripting in an unsafe way, but are currently unreleased -- so suspend preemptively
groovy-choice-parameter
groovy-script-scheduler
Expand Down Expand Up @@ -887,3 +886,11 @@ [email protected] # SECURITY-1025
[email protected] # SECURITY-1025
[email protected] # SECURITY-1025
[email protected] # SECURITY-1025

# Non-open dependency, refer to:
# https://github.com/jenkins-infra/helpdesk/issues/3854
# https://github.com/jenkins-infra/helpdesk/issues/3842#issuecomment-1839385370
# https://github.com/jenkins-infra/helpdesk/issues/3842#issuecomment-1841569022
# https://github.com/jenkins-infra/helpdesk/issues/3842#issuecomment-1847399101
# https://github.com/jenkins-infra/helpdesk/issues/3842#issuecomment-1847559631
crowd2 = https://github.com/jenkins-infra/helpdesk/issues/3854

0 comments on commit f9eb151

Please sign in to comment.