Jenkins Google Summer of Code Office Hours, 6 Sep 2019

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Jenkins Summer Project Demos. Part 3

Description

This summer Jenkins projects participated in Google Summer of Code, Outreachy and Community Bridge. During this Online session our students will present results they achieved during their projects. This is a third part of the presentations

There will be 3 presentations:

* Aarthi Rajaraman, Gayathri Rajendar - Audit Log plugin for Jenkins security
* Ndubuisi Onyemenam - Static Code Analysis Integration into Jenkins Pipelines for CiviCRM
* Abhyudaya Sharma - Micro-benchmarking Framework for Jenkins plugins

Meetup page: https://www.meetup.com/Jenkins-online-meetup/events/264475225/
Abstracts and presentation links: https://docs.google.com/document/d/1Ey-VXbMa1JT3tFDLDoW9yIRkzH324hP7OB1j7B80lX0/edit#heading=h.wu4xy96whhsx

A

Okay, it should be recorded now hi everyone thanks for joining me, some limited Meetup. Today we have a number of presentations by Jenkins summer project students. We had three projects: BCA, it's a google Summer of Code outreach in community beach. As I said, this is the third part of the demos. If you are interested to find previous parts, you can go to James on lighten it up, so you can find to post meetups. Today we have seven demos in total and you can find all the recordings and links to slide.

A

So then, today, a third part. We have two presenters from google Summer of Code and one presenter from outreaching I'll spend a few minutes, not reduce these programs. If you don't mind at the previous meetup market has already done a great introduction to Google Summer of Code, so LBP, google Summer of Code is just one of the biggest open source programs in the book. It has thousands of students, and this year they were almost 200, their open source organizations, but he's speaking and bridging his project is proud to participate in this program.

A

This is our third year in google. Summer of Code, basically, the program started in March and the results have been announced just a few days ago, so we have seven projects this year. Five projects have successfully abbreviated, so they passed all the variations and you can find blog posts. These result summaries.

A

Your website and all these projects have been presented. A review of the previous demos. If you have any questions about the google Summer of Code, etc, you can either general or Akito Chuck yeah. That's the quick introductions. They got announce which we haven't introduced it yet in our meetings, but you have chased me around on the call. Tracy is the leader of outreach, a Jenkins and Tracy. If you could say, if you want force about that ratio, it will be paid.

B

Yes, great thanks Alec mm-hmm um yeah, so Jenkins in outreach e. So if you may or may not know, I am the Jenkins out coochie coordinator, so I his work with folks like Matt and to identify the projects and set and find mentors and then go through the application process. So we joined Jenkins has been doing outreach E for the last two sessions, so we started back in 2018 and I'm happy to say up to now, we've had four students.

B

Who've worked on Jenkins two in each round through the outreach E program and specifically they've all been working on the audit log plugin, and one of the things I wanted to say is that it's been really great kind of participating in this project. Well, the program so, first of all, because Jenkins participates in G sock, we've been able to benefit from all that knowledge about the internships and move that over to outreach e I.

B

Think specifically, for me, outreach II has been really good in also highlighting other things like we get a lot from the outreach community. Thinking about you know: how do we communicate with people who might have impostor syndrome? How do we change our language a bit?

B

So that's been, you know pretty eye-opening, certainly from my perspective and as ever, it's always nice to welcome new people into the community, and one thing I just wanted to add as well is what I'm really happy is what we've learnt in outreach you we are also taking to the other open source communities and under the CV foundation, continuous delivery foundation.

B

Jenkins is leading the way there not to encourage other communities like Tecton and Jenkins X to spin up their own outreach programs. So I really like this kind of cross collaboration. What's going on and we're sort of all learning and pushing things forward together, but yeah just back to today, I'm really excited to see these updates and just sort of see what everybody's been working on and maybe at the end, who can say a bit more about the the next round of RPG coming up as well.

A

Thank You Tracy.

A

Yes out for most programs for google Summer of Code and I appreciate, we are looking for more contributors. For example, outreach starts soon. They will be another winter round and inject this project very interested top line. So we are project ideas for mentors and technical advisors and, of course, we're looking for students same for google Summer of Code. If you're interested, we will definitely participate next year. Oh I think there's cluster them to Google happen, and if so, we don't definitely apply.

A

So if you have any project idea in mind, if you have some issues with Jenkins, if you need I mean which is mentioned, and if you are willing to invest some time to become a mentor, we will welcome. Iu injects community, saying go, students say if you want to join. There is a lot of opportunities, and it's not only about loan programs. We'll also have other programs, for example, on October 1st. We will have a breakfast, so October fest is a worldwide program.

A

Basically, it's a online hackathon where everybody can contribute to open source projects and get some swag in return in the jeans project. We also invite people to contribute. So if you consider joining jae seok outreach, you may need the best opportunity to explore the project and yeah. In 2018 we had a blog post, which you can refer to.

A

They will be similar to solid 19 once we go live, but what was mentioned in be there was it's not something like we just submit to and wait for contributions, Beachley prepare projects so that when you come up with our set and during the project easily, so you can see that we have a number of select projects. So this is a list I'm 2018. We will have some at least or to some banking and for each project.

A

We have contributing variants, we have newbie friendly issues and we also have code reviewers or on standby mode and who are ready to review your contributions. So we try to reduce the feedback loop as soon as possible and we try to help contributors and we invite everybody to participate, October, 1st and there also other committees. So if you are interested it just starts next month, and hopefully we will also have some local jenkins area makeups. So it's just on site events, which I was a part of Oktoberfest, so stay tuned for announcements.

A

Ok, back to the today's agenda, we have three presentations. Today. We've made some changes to our schedule, so first presentation will be from midday about management and framework. Forging explains me. They already did a presentation about top strategy planning performance improvements, but he has much more to show. So thanks a lot for joining us again in a new dilemma. We also have our tea and diet rate from appreciated, present audit work plug-in and we have been disfigured from my CV CRM project so severely. Acm is another project which was working on a Google and.

A

There was a project for big static code analysis, a eugenics pipelines so other organization and thanks a lot for your contributions. So you see some big studies.

A

Ok, so before we proceed over to presentations and if you have any questions feel free to use those in charge, so you can just ask any questions there and you will ask presenters after the talks and also I feel free to join our little chat so that there you can ask questions of fine and then we will try to answer them as well. Okay, any questions before we continue use demos.

A

A

Okay, then, first presentation I already.

C

Share my screen.

C

Do you see my screen? Yes,.

A

C

C

So hi everyone I, am today and I created the benchmarking framework for Jenkins plugins during my google Summer of Code project. So what we do is we learn Java micro benchmark harness benchmarks in kins plugins. So what is a micro benchmark harness?

C

So it is an open JDK project and it runs the benchmark code multiple times it does warm-up iterations so that the bytecode the code, the your benchmark code, gets compiled to bytecode so worth wasting any time, and it provides various measurement tools like to get the average time and the throughput of that is the number of executions that are happening in a given time period and we run benchmarks on multiple folks to avoid the measurement errors.

C

So we introduced the benchmarking framework for Jenkins plugins. So what this enables you to do is to start benchmarks using Jenkins and it's available to everyone through Jenkins test harness.

C

We have a male in profile in the plugin pumps, so you can run benchmarks locally and we also have a pipeline step in the Jenkins pipeline library for running pull. Request builds on CI, Jenkins I/o. We also support using configuration escort for setting up the instance that is started for benchmarks, so the framework works by running the benchmarks directly from the unit tests and the benchmark classes are automatically fun when they are inundated by jmh benchmark and a temporary instance for every folk of the benchmark is started.

C

So this is what a typical benchmark looks like. So we have, we have a class that is annotated by JH benchmark for it to be automatically detected, and this extends the jmh benchmark State, which provides the setup and teardown methods you can override them to setup the folks for your instance for benchmark and you have a benchmark. Oh that is annotated by benchmark. So you can write a benchmark code here.

C

We can also configure Jenkins configuration s code, you can provide EML files and the configuration would be loaded and the Jenkins instance would be started for that. We do not yet support configuring. The benchmark instances with local data, that is, your conflict dot, XML files. There is a Giro ticket for that. So you can follow that now. When we use configuration is good, we have to extend the cache gmh benchmark state instead of just image, benchmark states, and you have to provide the path to a Hamel file.

C

This also provides you the setup and teardown methods which you can override. If you need to setup anything else, and you need to return the enclosing class, which is annotated by JH benchmark and your benchmark code goes here just like it was previously, so the benchmark reports generated through the unit test. That runs the benchmarks, and you can measure multiple times through a single run for more details. You can see these samples on the image website.

C

The reports views are written to the disk after the benchmark completes in JSON, and these days--and reports can be directly fed into the JMS report plugin or to jmh visualizer website. So this is what a benchmark visualize looks like through jmh visualizer you can. This was the performance improvement in your strategy plugin, and you can see the pull request for more information about it.

C

So, under the hood, we basically start with the framework that starts with temporary jenkins instance inside jenkins, test harness, and we have a maven profile in plugin pump goes in 3.46 and you can run benchmarks locally through that, then we have configuration, is code plugin, which uses which sets up the instance. Using configuration is good and all of these were integrated into the road strategy plugin and the new folder authorization plugin. So we have benchmarks there and these benchmarks Tran has a part of the continuous integration pipeline and they were.

C

There were performance improvements to the roadside, eg plugin, and this framework was really useful there. The reports were generated using the run benchmarks step in the Jenkins pipeline. By appearing there were some bugs and challenges that I faced. The first one was test from issue from Jenkins test. Harness was refused to be marshaled.

C

The other thing was jetty that was running the Jenkins instance for deaths would leave stray threads running after the server was stopped, so this caused the damage benchmarks to wait 30 seconds for every fork of the JVM after which it was forcefully killed. There was there were, there were other issues like version conflicts with guava and the D was these were fixed instead unless 2.51.

C

So if you want to contribute before that, I just show you how to run the benchmarks locally. So we have a benchmark runner here. This allows you to setup how to run the benchmark and we specify that we want the result in JSON and the name of the output file. So after that we find the benchmarks automatically and we just run the benchmarks. So right now we are just running this benchmark, which measures the time for generating a CL object.

C

This is specific to the rural strategy plugin and so to in this particular example, since authorizing authentication for Jenkins is limited to one thread. We set up on the authentication for every thread that is started now.

C

Let's just run a benchmark, so you can run the benchmark by giving the the benchmark flag may we'll test and the benchmark run starts.

C

So this is the configuration that is being passed to the the benchmark and after the benchmark completes we get a JSON report here. So this is what the report looks like and we can. This switch to geometries realizer for seeing the actual comparisons of performance tests. So these are the performance improvements that were made to the row strategy plugin. After the improvements of the improvements we observed, we're up to 10,000 percent and in this- and in this particular case the benchmarks helped us a lot.

C

We also have a blog post that you can read.

C

Yeah, so we have a blog post and you can just if you want to learn more about the framework you can read through this and.

C

I would love to hear your feedback, and you can contact me. Try to the pro strategy plug-in, get a chart or through Jenkins developers, mailing list and, if you like to and I would love to have you contribute to the framework and it's available in the Jenkins test, harness before I end I'd like to thank my great mentors, Oleg Ranjan super, and thank you. Everybody thank.

A

You for the presentation, are they any questions? I.

D

Don't have a question, but I do have a compliment, and that is on your slides. They, a bunch of us, have been noting how beautiful your slide deck is. Thank you.

A

I always say that it's not only about this Friday, because the content is really great, so we just provide some context. It wasn't a full google Summer of Code project. Actually what a beauty presented there was just the part of the first coding phase. So before we started doing performance improvements on the plug-in, we needed a way to meet the input. So this way the project started from the performance, management and framework and yeah it was the first implementation was just completely May week or so, and basically for the rest coding phase.

A

We were spending time on examples and improve performance of the plug-in and also include ties in the changes, because this framework is not a standalone project, it was intimidated the encouraging its components. So it's a standard test harness it's a framework which is used by almost averaging spun into test automation for the Union testing integration testing. Then it wasn't iterated the plug-in poems. It was integrated into Jaime's pipeline library.

A

So if you see a Jin se-yeon test automation, basically, you can just invoke a step and you will make it right for your plug-in D and in addition to the it being it some indications configurational scores so that quality or flight forming teams between modulator.

A

Thanks to these improvements so yeah, it was really really great change and thanks a lot everyday for working on this project. Yeah.

C

Thank you. This framework has now been integrated into so.

A

E

Now yeah I was able to get it to work. It's just that. um The thing that I was trying to benchmark turned out to not be the issue. In fact, the benchmark helped me discover that the thing that the hypothesis that various people were putting inside the Jenkins ticket that I was looking into were completely and utterly wrong, based on the jmh test. That was showing me that that code path was taking like less than a microsecond or less than a millisecond one of the two.

E

But basically it was definitely trivial, but it helped me um figure out the right thing as well, and this was also tested on jenkins core, which made it a little more complicated to integrate, but from a plug-in perspective, it worked. They worked just worked already, which was nice.

A

E

Have used jmh and other project before so I was able to at least jump in and it was, and I was happy to see how easy it was to integrate straight from the work that you've done up. Don't remember, I, say your name yeah.

F

Thank you. It's a building, a beauty, yeah, okay, okay, yeah. It was cool project, cool presentation. Thank.

A

A

Because if you.

A

James for slow, you know something like that: Ashiya slopes down some iterations and Jenkins ya know. If you use frameworks, we can avoid the same behavior in production plugins and encourage.

A

E

And I'd like to add, if there's no better way to end an argument about performance than by measuring it, so this is a very, very useful plug-in to have. So thank you for that.

A

Thank you, so any additional notes or questions before we move on I.

A

A

Let's place it to be the next presentation asking: are you thinking.

G

A

You can just again.

G

It's a grease, but you know how work to get the Matt Jeff, Jersey and other mentors in the project. So far since, since we have many new people and that's all I would like to give up this description about the project. The project which we which we worked on is the audit log planning every audit log plugging as a giant is plugging which is used to order the events that are happening in Jenkins environment for unwitting purpose for auditing. We have used an apache log4j object, as I would like to say, Matt.

G

Our Mendte has released the plugin at its version 1.0, and I suppose, as we learned that now how awesome it is to contribute. We offer open sources, so there were. They are many more continuous contributions in future I hope so knowledge I would like to say there are two are coming things in the plugin I would like to share, which was shown soon as we pushed in towards one first. One is like, which is should define all these events by it.

G

Yes, that I had some hands on, and the other one was like using a description. I will describe the pluses and they're getting the configuration of of the plug-in at. It is just before.

B

G

Them I would like to share a short demo, the plug-in as the plug-in has been produced earlier it is, it can be installed at any junk engine. One man, given that the version is satisfied now I would like to say our plug-in is available in the link of plugins Jenkins io I'll show shoulder installing the plug-in since I have already in my local I have already installed the plug-in local set up already I have installed the plug-in. I would like to continue with it once the plug-in has been installed.

G

The audit logs will be shown, and the here are, the clouds will be shown in the.

G

Dish, it shows the door, it knows all in HTML format,.

G

How to mention that that is work on this feature? She gets the log with them when they are admitted sorry Sascha there. She gets the log returned to a rolling file in an HTML layout and expose the file and also importantly, only admitted administrators will be able to view de la check. The auditor informations in the plugin.

G

Let me now create a new item and we are auditing in the creation, updation and deletion of the others, whatever the actions which some of you are doing, like a big deletion, everything for this area, I'm, creating an item name.

H

G

We have created a item you can see now that is being audited in that audit clock screen related to this plugin of two things are significant. I would like to say that one also list of events that are audited and how extensive it is, and the other is the Blazers bags air auditor I would like to say, and for now we say we saw.

I

G

Of the auditor information, how the other thing has been happening now, I'd like to say coming to the list of events that are being organized I'd like to say a rhythm I, remember if you have a shell user, login and logout key or password update, create user they'll, start they'll, finish, create copy, delete items and create update the leaf nodes and are using of creditors and coming to the events extensibility part, it is currently working in progress.

G

Would like to see if any ideas or positions from your end will come from your side. Please share them in the outreach and come into the second part. The places where the audit information is sent to our soft stone once the HTML web UI one is what HTML web UI, which checks, but now I asked as I have shown the object with how it is all coming. Next I would like to share the usual rolling log finds or in some cases, certainly developers do some other services.

G

This part is configurable according to the setup and its return homes in the different organizations.

G

Let's see how to consider one in manage when manage and things.

G

Go to configure systems.

G

And we have to in order to log configuration without the Google we can select, which a panda will be required to use to get the audit logs the under type either it'll be just on road or a syslog layout.

G

Now what is configured actually I saw gone to the past or to be stored in the audit log file the file by default. It will be present in the locks folder in the Jenkins home directory.

G

Another available configuration is sent the audit logs to another server over the TCP protocol, y-axis lock up and.

G

Once it is gone once the configuration is done, it will send the audit logs to the other services you can see. There are bidding all the information being shown there.

G

We decide by means of definition in the catalog, on the information that are audited by the plugin.

G

And one another way that was started but left as it is considered, unsecured just to get the audit logs stored in the database, though it is half-baked the the PRA for that is still open. I used to have post this DB dear.

G

This configuration will be mines with battery works and got to be lightly update the swings with the help of match and the last time I spoke to her. Regarding this, she was figuring out how to how to do word and please work. Raya I have had finally I'd say: please try out the plugins, and let us know your comments on the channel. It would be helpful for us and that Laster I would like to thank math just philsie one second, for their support devote time to everyone. How amazing.

A

And thank you for the presentation. Are they any questions.

A

If not, I have a question so about the external storages. So since you do syslog, basically you already can forward this data to logstash and to other debt collectors because they integrate with syslog. Have you tried this configuration already.

G

Can you please ask the question again, I couldn't get you.

A

For audit logs.

G

I thought mommy have just configured the slot server and we haven't tried that we'll try.

G

E

Don't think we've tested out any actual scenarios with it in Jenkins, specifically, though, we have used the the particular log4j plug-in they were using for syslog stuff I have been used extensively and a bunch other projects unrelated to Jenkins before so it's sort of one of those it works in theory things, but we don't have documentation on that. Yet I think we're I think it was initially.

E

There was the thought of looking into supporting, like Postgres or or something directly until we kind of had second thoughts about that later on when we realized that that wouldn't.

G

E

Essentially so we sort of had to, we didn't really have enough time to test out external log storage. Yet.

A

Okay, thank you, yeah. Another question is about audit trail plugin. So what is the difference between audit log and audit trail?

A

Just what's the difference? I think.

E

I might need to explain this a little bit, so maybe the main difference is sort of like there's, there's two main differences in how it's architected one. The big difference is our actual library use we're using actual structured logging, which is which is very useful for machine readable logs, a lot of people just use sort of diagnostic logs most of the time, and those are a real pain in the ass to actually parse by your logs collector.

E

But the other major thing was that they audit the audit trail plugin implements itself essentially as a servlet, filter and kind of just tries to intercept various URLs that it already knows about and then say, and it will log those just in in a standard sort of Jenkins log.

E

What this, what what this plug-in does is actually tries to properly instrument all the various listeners or creating new listeners or just directly audit logging from the invoked code, so that get maximum amount of information that we wanted. As well as let's say, it's a I I'd consider this far less of a hack job than some sort of URL matching based thing. Now.

E

The URL matching thing has worked well enough in the past, but I feel like there's a lot more internal actions that can happen that don't necessarily correspond to you or else all the time so far they have mostly but yeah. Those are those are the main things if you want to go. Take that a step further. In theory, the audit log plug-in is a zillion times faster than the audit trail, one because it's using log4j instead of java.util logging, which has orders of magnitude difference in performance, characteristics.

A

Okay, thanks for the explanation, yeah I think any other questions.

B

It's a general question for me so yeah, it's always nice to come to these things and see things and I always learn a lot because just nice to see what capabilities I'm so arts, specifically I, was just going to ask about your experience and maybe what was the biggest challenge you faced on kind of getting this functionality together, I.

B

Can see on mute, so I don't know if you're talking.

G

Who's he actually first our government Foster for communication and understanding the cold. It was the biggest challenge. I was raising.

B

For that you relied on asking a lot of questions, or did you feel there's a lot of self-service information we had for the kind of plug-in development.

G

Actually, I don't have any previous experience like this before this is my first time I'm doing serve these activities.

B

Okay and any other, maybe comments on like I, know it's hard to compare. If you don't have anything else, but yeah any any suggestions or things we can improve from the Jenkins side. I think will be well appreciated. Yeah, thanks for the work.

A

A

Respected and gay, if you want, we can just write combining two without reaching meeting next week. I'm going to be, and everyone is welcome, to join and discuss the results, or maybe we could.

A

Discuss it and Shakespearean sleeping projects.

A

Any other comments.

A

A

Okay, so yeah thanks for the presentation, honesty, my question to you, so we had two students in on the summer or was the second part covered in the presentation.

E

um Let me think here so we had the the syslog stuff was a bit part of that we did have a lot of interesting setbacks related to that, partly because even me, as a person, who's been working full-time on Jenkins for over a year now is still slowly barely understanding, some of the api's that we were trying to use that are all UI related type of things.

E

There was that, let me see what was the other thing one second.

E

Well, we showed the audit log page that was a had a bit of interesting things to it.

E

See some of the last things we were talking about: weren't actually weren't delivered, yet they were related to that. What we were just saying, the describable descriptor thing I think we probably covered it, looks like it since we don't really have a a syslog server to demo with it.

E

No, we don't really have anything else to show I, don't think, because we showed you the audit log page itself and configuration page and the various events I'm, not sure if we showed every possible event, that's logged, but it might take a bit of time to set up so I. Think I think we covered everything. Okay,.

A

Yeah, thank you. So, let's proceed to you saw presentation.

A

Misha, are you ready.

A

A

So there was a message in the chapter that every flow fishes are not very sure we will have a reset presentation today.

A

A

You see if you're talking, you're, muted.

I

You know, can you hear me? Yes, we can so I had a little Dometic atria. My.

A

I

Which are on and everywhere, I think I've been able to marry.

A

Okay, so what would be your preference? Okay? We can do the presentation now or maybe could be it as a part of my plan altering evening. Oh maybe another special interest group meeting, so if you prefer to move it okay and of it, okay, okay, let me see I, think I'll be okay,.

A

Just feel free to share your screen once you're ready.

I

What is there any other baby I, don't know.

I

Sorry, don't see any other between but I don't know.

A

No, there is no other presentations scheduled, so basically the presentation. So if you're ready, we can continue, if not I, think.

I

I think I'm going to take the position. I'm just get done.

I

To be together,.

A

Sorry look at, can you hear me? Yes, we can the audio breaks in it, but you generally can hear.

I

Nothing happens.

A

Okay looks like oh, there is quite unstable, Wow.

I

If you better now, can you hear me yes,.

I

Can you see my screen? Yes,.

I

So would everyone, um my name is nnamdi BC and I'm, presenting on my who's, not good for yet the battle is done, particularly Keys integration. 457. So did everyone hear me?

I

Yes, yes, here, okay,.

I

So civic awareness and open source on position see relationship manager and it was only used by non-governmental organizations and nonprofits for positions to manage their campaigns to track on how much and x1t they had to send messages to stop contacts. Until all of that, currently we have over 11,000 employees. Working um CBC I am including arm Wikipedia.

I

So the question is: why static arm analysis so currently TV CLM uses arm Jack needed as fat obese CI CD to chain, but they only have a unit test as part of um what you need to do before I booked us can be maze, so we just some really test the found out that sometimes they have sub so errors, which they, who request of us do not actually get to see. So they had to find a way to see if they can be able to check.

H

I

And also tell persons I was going good good she's made. It was and also see how they can fix it. They also need for something that can scan the code risk since they could be talking instead for some years now, they didn't have something to scan the cookies and also mention if they were ever simply existing code and, lastly, they needed that for some quality assurance and to improve on their good qualities.

I

So currently, the to churn for CVT am consist of geek top-ranking Civic, oh, and we should be adding on some. Some is the truth. We are to use for static analysis and the code base works with PHP. So we look into different static analysis tools for PSE. We looked into fan and we looked into stand, but we were able to choose an Sam because Sam had is to configure some also had the secretive ever messages.

I

Also Sam was in active development, meaning that whenever we had ever switch time to actually open issues in the github repo and also have the issues sort. So that was why we picked our samp Fordism u-sub budget.

I

So this is an the workflow. The work flows from its developers, machine once they develop, is able to push to github. We should have Jenkins pick up the web book from github, then install composer and wants orders with dependencies, then also on static. Our analysis then display whatever it was. We have from the current to request a start of the Jenkins log on APR.

I

So I'll be discussing some of the challenges I had trying to integrate some into the already it is in Jenkins I'm. Switching so since the Jenkins to tune was already in use by CVC I am I was given like a separate environment for me to try and integrate Jenkins, so social integration, so they they provided me with an environment. If I've added had everything currently in place, which the future in use the only difference was. This was just for trial.

I

I could make my trailer on arrow because they couldn't stand, makes me having tires and arrows in something they are using for development.

I

So my ever of my challenges with Jenkins was that I actually couldn't use the Junction's documentation to implement static analysis requests, so I had to read and read and read a bit and scrap online, so the thing was I was able to see some results that match what I was looking for, but you could hardly find them on the first page of Google web or the second page, so the documentation I think we need some improvements, especially with integration. We time the table and also the configuration, wasn't easy at all for Jenkins.

I

They have to be lost and lost and of configuration before you can get your Jenkins to work and, besides that they haven't any descriptive ever messages just have to like configure, then try to mesh make a poop request and see. If you had your changes expected.

I

So so far I'm Knightly hello.

I

Hello, can you hear me? Yes, we can okay, so apart from Jenkins, also Adam some challenges integrating Sam and it could be one may mention momentos mentioned that is usually very difficult to integrate static analysis to large good business, because sometimes satellite systems fail to analyze. It could be at one point or the other. So why trying to run Sam on the pivot mm co-op? Could these high hats on errors, but the booty was that's. Whenever I open issues on the errors on this hammock was it way the good people are son?

I

We are able to fix the Box, so sound is used by Vimeo Ramirez on the video chain that one like on YouTube. So since Sam's used by Vimeo the develop a sphere active and we are always ready to fix any errors in content, so apart from the Box I'm having them fixed, so Sam can actually one on the coal deposit or another issue was the baseline. So it was not obvious to us that we must have I was in, it could be seen. D could be.

I

It consists of thousands of lines of code and different food. Us we was half a verse, but the issue was: is there a way? We could have this errors? What we have the test passing, because definitely there wasn't anywhere the developers of CV CLM could fix all the errors shown by am Sam before continue. What you are doing, cv7 was in active use. We had box that we are actually needed, like box, that we had to fix and also has which was we had to implement.

I

So there was no way we could wait for to handle or the everstorm by Sam before we could continue. So, fortunately, Sam had a big line feature which allowed developers to kind of transferred neighbors that have already been tuned, so this error could actually be there and some would pass somewhat early because I was presently in your current do request. So that was one challenge boards some already had a way to contact using the abyss line future when we were able to fix the baseline future.

I

Another issue we had was false: negatives, we're having thousands and thousands of Eva's or, on our static analysis, returns that most of the devil's spoke about. Our dependencies did I mention like missing class and recent functions, but when my mentors able to look at it could be different attacks, those we have four negatives, as those classes were actually in existence. In our code, this so dimension there was in for us to have a bootstrap file or an O to notify that would posting all the dependencies before static.

I

Our analysis was done, so we could reduce the forty negatives and then have some errors that actually we had to so when I had the Box fixed and bit like future implemented and also had an Orthodox I configured, so it is false negative. Where would move on on with the project? So with that fixed we able to have some filling text and when we able to fix those tests, we able to have a test that we are passing. So that was actually what my bosom of good project was trying to integrate.

I

Son, which is a static analysis to into the Civil War, could be so before ProQuest emerged. Some can be able to analyze the code to make sure we don't miss out on subtool errors.

I

So in conclusion, I think I've come to love, I'm the open source culture, because my mentors, we are full of empathy and they are also very patient. With me most times, I was talk with blogs for weeks and they're, able to encourage me to try to figure things out and also to give me one or two TVs. Also, everyone in my organization was also very, very helpful. I also wish to thank I'm. The James do something giving me opportunity to present on my project. I be sharing links to my final boss.

I

You get anyone once you have a look, so thank you. Yeah.

A

I

For your presentation.

A

Are there any questions.

B

Another question but yeah I just wanted to say you know if I spill a bit of water myself before presentation, I'm a mess of congratulations on doing that given given the flooding and yeah I've just found that really interesting and I wasn't familiar with Psalm and I know: there's always challenges when you're trying to integrate things.

B

So really nice to learn about this and I look forward to the.

I

Ok, deployment I was able to use.

I

The Jenkins I'm ta Buda.

I

We have the junkies who graduated I, think that was the major plugin I was able to use we'll get a big Jenkins pool request with a puppy dog and I.

A

Think so, okay, so you don't use pipeline so far, right! No Lulu.

I

Pipeline so just be cool Peltier, yeah.

A

Thank you and folks, all reports publishing did you use anything so I didn't get that so after executing publishing.

A

I should change when running so so it generates a report, a static analysis results. Doing a publishing could somehow engine is for me, interface.

I

Yes, I think by default. Jenkins allowed me to see the log somewhere I, don't know if I could show. Okay, no need I. Think Duncan's. Oh I I use the deport on logs from Jenkins to see um the output.

I

Okay, hmm yeah.

A

Thank you. Okay, if some produces enough information in the world, it's yeah. It's a really nice way to use it.

A

Okay, are they near other questions.

H

A

Specific close, so yeah, if you use Jenkins pipeline, you can retrieve locks for every step, so, for example, if you're on Sodom or and there any other tools, you like, you can get a separate locker just for this execution. You can access only this specific book from rusty Perry and if used tools like a solution or just pipeline stage view you can see specific books and web UI.

A

Any other questions.

A

Yeah thanks a lot for your presentation, and we are things- are a lot for your hard work on my CV CRM I would like to say thanks to all students who presented today and all students who presented in previous sessions as usual, we will be published, recording from the Jenkins YouTube channel. So you want to be able to see and the recording of this session, and if you have any questions during our get the chart- and we will be able to answer the questions today.

A

Okay, so yeah thanks! So are there any other questions or additional comments before we close down when a decision.

A

A

Okay, if not just thanks to everyone, I will stop the recording, and you see here the next Jake's online meet up. Maybe in a few weeks.

D

Thank you, everybody. Thank you. Make.

E

Presentations: everyone thanks.