How to use OSS index for Jenkins plugins

Post by venkatn087 on Mar 25, 2021

Hi Team,

We are using Nexus oss index Maven plugin to scan the artifacts present in pom.xml.

Is it required to scan the Jenkins plugins to make sure plugins are secured/non-vulnerabilities.

If yes, could you please let me know how to scan the jenkins Plugins. Please correct me if am wrong.

for ex. Jenkins plugins are “Quality Gates SonarQube Plugin”, “Invoke top-level maven targets” etc.

Thanks

Venkat

2.0k views