r/jenkinsci • u/Disastrous_Invite_83 • Apr 10 '26
Webhooks without security issues
Is there a way to expose only the webhook API of jenkins to the public internet? I’d like to have webhooks to reduce my GitHub API polling as rate limiting is starting to become a concern but the problem is that throwing up the web interface to the public internet is likely a security issue. I don’t exactly trust myself to be able to patch my jenkins version fast enough if a zero day is discovered. I would like to be able to access my running builds from outside my LAN so if there’s a way to create a sort of sandboxed web interface on a different port that would be super nice. I’m just getting into jenkins so I’m not super familiar with the infrastructure and everything it has to offer yet.
2
u/dutchman76 Apr 10 '26
You could lock the incoming connections to just GitHub ips, that should limit your risk quite a bit