Publish over ssh alternative

Using Jenkins Ask a question
1

Hi All,
Starting from Jan 12th, 2022, Publish Over ssh Plugin (used to send artifacts over SSH from Jenkins) has been Suspended

Does anyone has any idea what is another plugin that we can use to send the artifacts over ssh from Jenkins in Linux Environment

2

Some possible alternatives:

  • Use the scp command from a Pipeline sh step in a withCredentials wrapper that provides the ssh private key to the sh step
  • Use the rsync command from a Pipeline sh step in a withCredentials wrapper that provides the ssh private key to the sh step
  • Use the credentials binding plugin in a Freestyle project to provide the ssh private key to a shell step that calls scp
  • Use the credentials binding plugin in a Freestyle project to provide the ssh private key to a shell step that calls rsync

If none of those work, you could download the publish-over-ssh plugin from repo.jenkins-ci.org and use it, knowing that it has 4 open security issues.

3

A new maintainer has stepped up so hopefully a new release is coming

2 Likes
4

There was a release 1.23 on GitHub which addresses the security issues: Releases · jenkinsci/publish-over-ssh-plugin · GitHub
But the plugin is still suspended: https://plugins.jenkins.io/publish-over-ssh/
Any idea when this update will be visible in ther plugin manager?

1 Like
5

That ^. I can’t find any procedure on the site of the Jenkins security team on how suspended plugins can be reactivated again. But maybe that is only up to the maintainers of the plugin?

6

Its a couple PRS to the update-center2 repo. The new maintainer is working on the plugin, I’ve seen the conversations on chat.

For now you’ll just have to be patient.

1 Like
7

The plugin manager now shows version 1.24. Thank you! :slightly_smiling_face:

8

Decent! Cool that this was fixed. Kudos to the maintainers of the plugin.

9

Thanks for everyone’s patience whilst the issues were worked through to get that last release approved and unblock the plugin.

1 Like