Script approval and sandbox in Jenkins - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding Jenkins Script Approval Purpose

Why does Jenkins require script approval for certain scripts in the pipeline?

A To prevent execution of potentially unsafe scripts that could harm the system or leak data

B To speed up the execution of all pipeline scripts

C To automatically fix syntax errors in pipeline scripts

D To allow all users to run any script without restrictions

💡 Hint

Think about security risks when running scripts from different users.

Jenkins script approval is a security feature that blocks untrusted scripts from running until an administrator approves them. This prevents malicious or harmful code from executing.

💻 Command Output

intermediate

Output of Jenkins Script Approval Status Command

What is the output of the following Jenkins CLI command when there are pending scripts for approval?

Jenkins

java -jar jenkins-cli.jar -s http://jenkins.example.com/ list-plugins --pending-script-approvals

A Error: Unknown command 'list-plugins --pending-script-approvals'

B

Pending script approvals:
- method java.lang.Runtime exec java.lang.String
- method hudson.FilePath write java.lang.String

C No pending script approvals found.

D List of installed plugins with no script approval info

💡 Hint

Check if the command syntax matches Jenkins CLI commands for script approval.

The command 'list-plugins --pending-script-approvals' is invalid. The correct command to list pending script approvals is 'groovy =< script' or using the Jenkins UI. So this command returns an error.

❓ Configuration

advanced

Configuring Jenkins to Automatically Approve Safe Scripts

Which configuration snippet in Jenkins Pipeline script allows a method call to be automatically approved without manual intervention?

A Use 'allowUnsafeScripts()' function in the pipeline script

B In Jenkins Script Security plugin, add the method signature 'hudson.FilePath write java.lang.String' to the approved signatures list

C Set 'sandbox = false' in the pipeline script to disable script approval

D Add 'approveAllScripts = true' in the Jenkinsfile

💡 Hint

Think about how Jenkins manages method signatures for script security.

Jenkins Script Security plugin lets administrators approve specific method signatures. Adding a method signature to the approved list allows scripts using that method to run without manual approval each time.

❓ Troubleshoot

advanced

Troubleshooting Script Rejection in Jenkins Sandbox

A Jenkins pipeline script fails with a security exception when calling a custom method. What is the most likely cause?

A The Jenkins server is offline

B The pipeline script has syntax errors unrelated to security

C The method is not approved in the Jenkins script approval list and sandbox blocks it

D The Jenkinsfile is missing the 'pipeline' block

💡 Hint

Consider Jenkins sandbox restrictions on unapproved methods.

Jenkins sandbox restricts execution of unapproved methods for security. If a custom method is not approved, the script will fail with a security exception.

🔀 Workflow

expert

Correct Workflow for Approving a New Script Method in Jenkins

What is the correct sequence of steps to approve a new method call used in a Jenkins pipeline script that is currently blocked by the sandbox?

A 2,1,3,4

B 2,3,1,4

C 1,3,2,4

D 1,2,3,4

💡 Hint

Think about how Jenkins detects and approves new script methods step-by-step.

The pipeline must first run to create a pending approval request. Then an admin logs in, navigates to the approval page, and approves the method signature.