Unable to find Snowflake-related plugin in available plugin list in Jenkins

Using Jenkins
1

We need to integrating a Snowflake-related plugin into our Jenkins pipeline. We searched in Plugin List but we are unable to find the snowflake plugin in the avilable list. But we found that plugin in Github.Before proceeding with the implementation, we want to ensure that there are no known vulnerabilities or security concerns associated with this plugin.

Could you please let us know if there are any reported issues, advisories, or recommended best practices for securely integrating a Snowflake plugin in Jenkins?

We appreciate your support and guidance on this matter.

2

Are you talking about GitHub - snowflakedb/snowflake-jenkins-plugin: Jenkins plugin enabling isolated installation of Snowflake CLI.?
This plugin is not hosted by the Jenkins project so it is not known whether there are any vulnerabilities.
Looking at the code it might have a minor issue at one point where a @POST annotation should be used. It would allow attackers with Item/READ permission to list available installations.

If you intend to use this plugin I would suggest to ask them to open a hosting request here. The plugin was only started mid of last year so maybe they already have that in mind.

3

@mawinter69
Thanks for your replay its really helping us.