Program Removed

This program is no longer available on YesWeHack. The scope data shown below is historical and may not reflect the final state of the program.

jenkins-bug-bounty-program

YesWeHackView on YesWeHack
RawAI Enhanced
34
In Scope
6
Out of Scope
In-Scope Assets (34)
AssetCategoryBountyQuick Links
https://github.com/jenkinsci/credentials-binding-pluginCODEYes-
https://github.com/jenkinsci/credentials-pluginCODEYes-
https://github.com/jenkinsci/git-client-pluginCODEYes-
https://github.com/jenkinsci/git-pluginCODEYes-
https://github.com/jenkinsci/github-branch-source-pluginOPEN-SOURCEYes-
https://github.com/jenkinsci/github-branch-source-pluginCODEYes-
https://github.com/jenkinsci/github-pluginOPEN-SOURCEYes-
https://github.com/jenkinsci/github-pluginCODEYes-
https://github.com/jenkinsci/jellyCODEYes-
https://github.com/jenkinsci/jenkinsCODEYes-
https://github.com/jenkinsci/ldap-pluginCODEYes-
https://github.com/jenkinsci/matrix-auth-pluginCODEYes-
https://github.com/jenkinsci/pipeline-build-step-pluginOPEN-SOURCEYes-
https://github.com/jenkinsci/pipeline-build-step-pluginCODEYes-
https://github.com/jenkinsci/pipeline-groovy-lib-pluginCODEYes-
https://github.com/jenkinsci/pipeline-groovy-lib-pluginOPEN-SOURCEYes-
https://github.com/jenkinsci/pipeline-input-step-pluginCODEYes-
https://github.com/jenkinsci/pipeline-input-step-pluginOPEN-SOURCEYes-
https://github.com/jenkinsci/pipeline-stage-step-pluginCODEYes-
https://github.com/jenkinsci/pipeline-stage-step-pluginOPEN-SOURCEYes-
https://github.com/jenkinsci/plain-credentials-pluginCODEYes-
https://github.com/jenkinsci/remotingCODEYes-
https://github.com/jenkinsci/remotingOPEN-SOURCEYes-
https://github.com/jenkinsci/script-security-pluginCODEYes-
https://github.com/jenkinsci/ssh-agents-pluginCODEYes-
https://github.com/jenkinsci/ssh-credentials-pluginCODEYes-
https://github.com/jenkinsci/staplerCODEYes-
https://github.com/jenkinsci/winstoneCODEYes-
https://github.com/jenkinsci/workflow-cps-pluginCODEYes-
https://github.com/jenkinsci/workflow-multibranch-pluginCODEYes-
https://github.com/jenkinsci/workflow-multibranch-pluginOPEN-SOURCEYes-
https://github.com/jenkinsci/workflow-scm-step-pluginCODEYes-
https://github.com/jenkinsci/workflow-support-pluginOPEN-SOURCEYes-
https://github.com/jenkinsci/workflow-support-pluginCODEYes-
Out-of-Scope Assets (6)
AssetCategoryBounty
any components/plugins not explicitly included are not in scope (e.g. forks, libraries or packages)OTHERYes
docker images are not in scope for this programOTHERYes
everything from https://www.jenkins.io/security/reporting/#non-issues, and in addition the following itemsOTHERYes
jenkins installers are not in scopeOTHERYes
jenkins instances hosted by users are not in scopeOTHERYes
jenkins project infrastructure (the one hosted by the project) is not in scopeOTHERYes
Scope Changes (100)
Mar 6, 2026
ChangeAssetCategoryScopeTime
Program Removed16:39
Feb 25, 2026
ChangeAssetCategoryScopeTime
Addedhttps://github.com/jenkinsci/staplerCODEIn Scope19:08
Addedhttps://github.com/jenkinsci/workflow-cps-pluginCODEIn Scope19:08
Addedhttps://github.com/jenkinsci/ssh-agents-pluginCODEIn Scope19:08
Addedhttps://github.com/jenkinsci/git-pluginCODEIn Scope19:08
Addedhttps://github.com/jenkinsci/pipeline-groovy-lib-pluginCODEIn Scope19:08
Addedhttps://github.com/jenkinsci/winstoneCODEIn Scope19:08
Addedhttps://github.com/jenkinsci/credentials-pluginCODEIn Scope19:08
Addedhttps://github.com/jenkinsci/credentials-binding-pluginCODEIn Scope19:08
Addedhttps://github.com/jenkinsci/matrix-auth-pluginCODEIn Scope19:08
Addedhttps://github.com/jenkinsci/jellyCODEIn Scope19:08
Addedhttps://github.com/jenkinsci/remotingCODEIn Scope19:08
Addedjenkins installers are not in scopeOTHEROut of Scope19:08
Addedhttps://github.com/jenkinsci/pipeline-build-step-pluginCODEIn Scope19:08
Addedany components/plugins not explicitly included are not in scope (e.g. forks, libraries or packages)OTHEROut of Scope19:08
Addedhttps://github.com/jenkinsci/plain-credentials-pluginCODEIn Scope19:08
Addedhttps://github.com/jenkinsci/workflow-scm-step-pluginCODEIn Scope19:08
Addedjenkins project infrastructure (the one hosted by the project) is not in scopeOTHEROut of Scope19:08
Addedjenkins instances hosted by users are not in scopeOTHEROut of Scope19:08
Addedhttps://github.com/jenkinsci/jenkinsCODEIn Scope19:08
Addedhttps://github.com/jenkinsci/github-pluginCODEIn Scope19:08
Addedhttps://github.com/jenkinsci/pipeline-input-step-pluginCODEIn Scope19:08
Addeddocker images are not in scope for this programOTHEROut of Scope19:08
Addedhttps://github.com/jenkinsci/ldap-pluginCODEIn Scope19:08
Addedhttps://github.com/jenkinsci/workflow-multibranch-pluginCODEIn Scope19:08
Addedeverything from https://www.jenkins.io/security/reporting/#non-issues, and in addition the following itemsOTHEROut of Scope19:08
Addedhttps://github.com/jenkinsci/script-security-pluginCODEIn Scope19:08
Addedhttps://github.com/jenkinsci/git-client-pluginCODEIn Scope19:08
Addedhttps://github.com/jenkinsci/workflow-support-pluginCODEIn Scope19:08
Addedhttps://github.com/jenkinsci/github-branch-source-pluginCODEIn Scope19:08
Addedhttps://github.com/jenkinsci/pipeline-stage-step-pluginCODEIn Scope19:08
Addedhttps://github.com/jenkinsci/ssh-credentials-pluginCODEIn Scope19:08
Addedhttps://github.com/jenkinsci/remotingOPEN-SOURCEIn Scope11:08
Addedhttps://github.com/jenkinsci/workflow-multibranch-pluginOPEN-SOURCEIn Scope11:08
Addedhttps://github.com/jenkinsci/github-pluginOPEN-SOURCEIn Scope11:08
Addedhttps://github.com/jenkinsci/github-branch-source-pluginOPEN-SOURCEIn Scope11:08
Addedhttps://github.com/jenkinsci/workflow-support-pluginOPEN-SOURCEIn Scope11:08
Addedhttps://github.com/jenkinsci/pipeline-stage-step-pluginOPEN-SOURCEIn Scope11:08
Addedhttps://github.com/jenkinsci/pipeline-input-step-pluginOPEN-SOURCEIn Scope11:08
Addedhttps://github.com/jenkinsci/pipeline-build-step-pluginOPEN-SOURCEIn Scope11:08
Addedhttps://github.com/jenkinsci/pipeline-groovy-lib-pluginOPEN-SOURCEIn Scope11:08
Addedhttps://github.com/jenkinsci/github-pluginCODEIn Scope11:08
Addedhttps://github.com/jenkinsci/pipeline-input-step-pluginCODEIn Scope11:08
Addedhttps://github.com/jenkinsci/pipeline-build-step-pluginCODEIn Scope11:08
Addedhttps://github.com/jenkinsci/pipeline-groovy-lib-pluginCODEIn Scope11:08
Addedhttps://github.com/jenkinsci/workflow-multibranch-pluginCODEIn Scope11:08
Addedhttps://github.com/jenkinsci/workflow-support-pluginCODEIn Scope11:08
Addedhttps://github.com/jenkinsci/github-branch-source-pluginCODEIn Scope11:08
Addedhttps://github.com/jenkinsci/pipeline-stage-step-pluginCODEIn Scope11:08
Addedhttps://github.com/jenkinsci/remotingCODEIn Scope11:08
Feb 22, 2026
ChangeAssetCategoryScopeTime
Addedany components/plugins not explicitly included are not in scope (e.g. forks, libraries or packages)OTHEROut of Scope00:51
Addedhttps://github.com/jenkinsci/ssh-agents-pluginCODEIn Scope00:51
Addedhttps://github.com/jenkinsci/jenkinsCODEIn Scope00:51
Addedhttps://github.com/jenkinsci/credentials-pluginCODEIn Scope00:51
Addedhttps://github.com/jenkinsci/workflow-cps-pluginCODEIn Scope00:51
Addedhttps://github.com/jenkinsci/ldap-pluginCODEIn Scope00:51
Addedhttps://github.com/jenkinsci/ssh-credentials-pluginCODEIn Scope00:51
Addedhttps://github.com/jenkinsci/plain-credentials-pluginCODEIn Scope00:51
Addedjenkins instances hosted by users are not in scopeOTHEROut of Scope00:51
Addedhttps://github.com/jenkinsci/staplerCODEIn Scope00:51
Addedhttps://github.com/jenkinsci/winstoneCODEIn Scope00:51
Addedhttps://github.com/jenkinsci/git-pluginCODEIn Scope00:51
Addedeverything from https://www.jenkins.io/security/reporting/#non-issues, and in addition the following itemsOTHEROut of Scope00:51
Addedjenkins installers are not in scopeOTHEROut of Scope00:51
Addedjenkins project infrastructure (the one hosted by the project) is not in scopeOTHEROut of Scope00:51
Addedhttps://github.com/jenkinsci/script-security-pluginCODEIn Scope00:51
Addedhttps://github.com/jenkinsci/matrix-auth-pluginCODEIn Scope00:51
Addedhttps://github.com/jenkinsci/git-client-pluginCODEIn Scope00:51
Addedhttps://github.com/jenkinsci/workflow-scm-step-pluginCODEIn Scope00:51
Addedhttps://github.com/jenkinsci/jellyCODEIn Scope00:51
Addedhttps://github.com/jenkinsci/credentials-binding-pluginCODEIn Scope00:51
Addeddocker images are not in scope for this programOTHEROut of Scope00:51
Feb 21, 2026
ChangeAssetCategoryScopeTime
Removedhttps://github.com/jenkinsci/jenkinsOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/jenkinsci/staplerOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/jenkinsci/jellyOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/jenkinsci/winstoneOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/jenkinsci/script-security-pluginOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/jenkinsci/credentials-pluginOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/jenkinsci/credentials-binding-pluginOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/jenkinsci/workflow-cps-pluginOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/jenkinsci/ldap-pluginOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/jenkinsci/ssh-credentials-pluginOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/jenkinsci/plain-credentials-pluginOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/jenkinsci/matrix-auth-pluginOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/jenkinsci/ssh-agents-pluginOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/jenkinsci/git-pluginOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/jenkinsci/git-client-pluginOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/jenkinsci/workflow-scm-step-pluginOPEN-SOURCEIn Scope21:40
Removedeverything from https://www.jenkins.io/security/reporting/#non-issues, and in addition the following itemsOTHEROut of Scope21:40
Removeddocker images are not in scope for this programOTHEROut of Scope21:40
Removedany components/plugins not explicitly included are not in scope (e.g. forks, libraries or packages)OTHEROut of Scope21:40
Removedjenkins installers are not in scopeOTHEROut of Scope21:40
Removedjenkins project infrastructure (the one hosted by the project) is not in scopeOTHEROut of Scope21:40
Removedjenkins instances hosted by users are not in scopeOTHEROut of Scope21:40
Addedeverything from https://www.jenkins.io/security/reporting/#non-issues, and in addition the following itemsOTHEROut of Scope00:33
Addeddocker images are not in scope for this programOTHEROut of Scope00:33
Addedany components/plugins not explicitly included are not in scope (e.g. forks, libraries or packages)OTHEROut of Scope00:33
Addedjenkins installers are not in scopeOTHEROut of Scope00:33
Addedjenkins project infrastructure (the one hosted by the project) is not in scopeOTHEROut of Scope00:33
Addedjenkins instances hosted by users are not in scopeOTHEROut of Scope00:33