Mailing-List: contact builds-help@apache.org; run by ezmlm
Precedence: bulk
Reply-To: builds@apache.org
From: Jaikiran Pai <jai.forums2013@gmail.com>
To: builds@apache.org
Subject: Jenkins Github PR integration - Support for whitelisting?
Message-ID: <4305f2b6-3e0e-cf50-d9ec-01c227fa79a8@apache.org>
Date: Mon, 25 Sep 2017 12:32:31 +0530
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0)
 Gecko/20100101 Thunderbird/52.3.0
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Content-Language: en-US
archived-at: Mon, 25 Sep 2017 07:02:40 -0000

Hello Build Team,

I'm one of the committers of the Apache Ant project[1]. We use Jenkins 
hosted by the Infra team at builds.apache.org for automated triggering 
of specific Jenkins jobs for pull requests that are submitted at the 
(read-only) mirrors of the project hosted at github[2]. The Jenkins job 
is a typical job that follows the steps noted in this article[3]. Things 
work fine and here's the Jenkins job we have[4].

However, a couple of things that seem to be missing when compared to the 
"official" Jenkins Github integration plugin[5] are:

     1. Ability to whitelist users who can submit a PR - this helps to 
avoid random users from creating (potentially malicious) PRs which 
trigger a job against Jenkins

     2. Ability to issue a "retest this please" command (by whitelisted 
users) as a comment on the PR to auto-trigger a new job for the PR.

Are these features already available in the one that's hosted at 
builds.apache.org and if so, is there some documentation I can follow? 
If not, is there any workaround for #1 or any plans to support these 
features?


[1] http://ant.apache.org/

[2] https://github.com/apache/ant-ivy

[3] https://blogs.apache.org/infra/entry/github_pull_request_builds_now

[4] https://builds.apache.org/job/Ivy-GithubPR/

[5] https://github.com/jenkinsci/ghprb-plugin/blob/master/README.md

-Jaikiran