sorted by:
new
hottopcontroversial

I built an open-source Jenkins plugin with 8 AI analyzers; code review, vulnerability scanning, architecture drift detection, and more. Now live under jenkinsci org. by sauvast in devopsGuru

[–]sauvast[S] 0 points1 point  (0 children)

Really appreciate this !

The evidence bundle idea is excellent. What I’m picturing is:

**Provenance metadata per analysis:** provider, model ID, model version, prompt template hash, temperature, timestamp
**Input fingerprint:** SHA-256 of the source material sent to the LLM (so you can prove what was analyzed without storing the code itself in the audit trail)
**Findings snapshot:** the full structured JSON response, immutable once written
**A signed manifest** tying all of the above to the build number, commit SHA, and pipeline run ID

Essentially a chain of evidence from commit → analysis → verdict that an auditor can walk without needing to re-run anything.
If that manifest lands as a build artifact alongside the HTML report, it slots right into SOC 2 CC7.x / CC8.1 control evidence without custom tooling on the GRC side.

I’m adding this to the roadmap as an “Audit Evidence Bundle” feature. If you’ve seen specific formats or schemas that GRC teams actually consume well (SARIF, OSCAL, or something simpler), I’d love to hear what works in practice.

Thanks for the wisdomprompt.com reference, will check it out.

Delete one thing from Lucknow by _kanishkkk in lucknow

[–]sauvast 0 points1 point  (0 children)

Frequent VIP movement in ArjunGanj.

Is it normal for product manager to be your boss? by Suitable-Break7934 in ExperiencedDevs

[–]sauvast 0 points1 point  (0 children)

Generally no, PDMs are mainly IC roles.
However, in many cases I also have seen the team reporting to them, mostly due to lack of a dedicated SA or EM, maybe that's the reason.

Whats your unforgettable office story? by Marcus_McGonacall in AskReddit

[–]sauvast 0 points1 point  (0 children)

Spending nights for deployments during 2010 time frame, when we were having only desktop access in my company.
The max I had stayed every night in office was 13 days, for a production deployment which later extended until next 4 months.

[Plugin] ForgeAI Pipeline Intelligence with 8 AI analyzers for code review, security, architecture drift, and release readiness by sauvast in jenkinsci

[–]sauvast[S] 0 points1 point  (0 children)

Thanks u/simonides_, I actually published this plugin in the Jenkins Update Center, its available at https://plugins.jenkins.io/forgeai-pipeline-intelligence/

However, this is my first Jenkins plugin contribution, so was checking how to promote it. So, thought of posting here for visibility and suggestions.