how to safely handle passing parameters to a jenkins build function in groovy script?

I have a funtion in my jenkins groovy script like so:

def build(String p1, String p2, String p3)

script.stage('Build')
try
script.sh "./gradlew -Pversion='$currentVersion' clean build"
finally
script.step([$class: 'JacocoPublisher', classPattern: p1, exclusionPattern: p2, execPattern: p3])





So how do I handle the case where a project's jenkins file doesn't pass any arguments to this function? I tried to put if conditions to check if these parameters are empty/null but that gave me the following error in the console output in jenkins:

org.jenkinsci.plugins.scriptsecurity.sandbox.RejectedAccessException: Scripts not permitted to use method groovy.lang.GroovyObject invokeMethod java.lang.String java.lang.Object

org.jenkinsci.plugins.scriptsecurity.sandbox.RejectedAccessException: Scripts not permitted to use method groovy.lang.GroovyObject invokeMethod java.lang.String java.lang.Object

2 Answers
2

You need to whitelist the method call in jenkins scripts approval
https://jenkins.io/doc/book/managing/script-approval/

I tried to put defaults like so:

def build(String p1='', String p2='**/classes', String p3='**/**.exec')

def build(String p1='', String p2='**/classes', String p3='**/**.exec')

Worked! :)

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.