jenkinsci/scp-plugin

Jenkins scp plugin

SCP publisher - deprecated

This plugin is deprecated due to open security vulnerabilities and readily available replacements provided with currently supported operating systems.

There are two open security vulnerabilities. The plain text credentials storage security vulnerability was published in October 2017. The CSRF vulnerability and missing permission check security vulnerability was published in February 2022.

The scp command is available on all the operating systems that Jenkins supports. Unix variants include scp with the OpenSSH commands. Windows includes scp with their port of OpenSSH.

The plugin was last released in January 2011. The last commit with any change to the plugin source code was in January 2014.

The last successful build on ci.jenkins.io was in September 2020. The plugin does not build currently.

scp-plugin's Issues

Add parameter base directory for hierarchy copy

It is often useful to check out a project, do work on it, and then scp a hierarchy that exists inside a directory in the project. But "keep hierarchy" assumes that the hierarchy base is always the workspace directory, necessitating a task to arrange the tree before the scp plugin is called, or ssh onto the target and copy the hierarchy parts there.

An extra parameter "base directory" available when enabling "keep hierarchy" would remove this necessity.

Is this plugin (scp) dead?

What feature do you want to see added?

I can see some PR and issue. Seems no one is maintaining it.

Will it be good idea to use it in production?

Upstream changes

No response

Add a possibility to configure sites directly using groovy

Hello!

We are using the jenkins-cli jar with its groovy command to automatically configure jenkins, we tried to add sites programmatically to the plugin but the sites array is too well protected, so we had to end up forging a request to pass to the configure() method (not fun, because not in a servlet environment).

So if the plugin descriptor had a public method like setSites() or something in these lines, my groovy script could simply invoke that

Here's a groovy snippet of what i wish would work

def descriptor = Jenkins.instance.getDescriptor("be.certipost.hudson.plugin.SCPRepositoryPublisher")
descriptor.setSites([
   new SCPSite(....),
   new SCPSite(....)
])
descriptor.save()

Thank you

[JENKINS-59660] SCP Plugin JCasc support

Your checklist for this issue

🚨 Please review the guidelines for contributing to this repository.
💡 To better understand plugin compatibility issues, you can read more here

• Create an issue on issues.jenkins-ci.org, set the component to the plugin you are reporting it against

• Before creating an issue on Jenkins JIRA, check for an existing one via dashboard

• Link to Jenkins JIRA issue

• Ensure Jenkins JIRA issue has the label jcasc-compatibility

• Link to plugin's GitHub repository

Description

SCP Plugin github repo: https://github.com/jenkinsci/scp-plugin

I manually configured the scp plugin SCP repository hosts section in <JENKINS_MASTER>/configure

When i go to <JENKINS_MASTER>/configuration-as-code/viewExport, i don't see the SCP configs there which means its not supported.

Please add SCP Plugin JCasC support for SCP Plugin

How to use my existing parameter on Source or Destination field

Hi,

I am unable to use my existing parameter values on the scp plugin Source or Destination fields. Could you please let me know the steps to use it?