Jenkins Integration

Jenkins Integration with TigerTrust

TigerTrust's Jenkins plugin brings certificate lifecycle management directly into your CI/CD pipelines. Automate certificate operations, implement enterprise code signing, and ensure certificate compliance throughout your build and deployment processes.

Plugin Installation

Install the TigerTrust plugin from Jenkins Update Center:

groovy
1// Or install via Jenkinsfile
2plugins {
3  id 'tigertrust-jenkins' version '1.0.0'
4}

Declarative Pipeline Integration

Use TigerTrust in declarative pipelines:

groovy
1pipeline {
2    agent any
3
4    environment {
5        TIGERTRUST_API_KEY = credentials('tigertrust-api-key')
6    }
7
8    stages {
9        stage('Build') {
10            steps {
11                sh 'mvn clean package'
12            }
13        }
14
15        stage('Sign Artifacts') {
16            steps {
17                tigertrustSign(
18                    certificateName: 'code-signing-cert',
19                    artifacts: 'target/*.jar',
20                    timestampServer: 'https://timestamp.digicert.com'
21                )
22            }
23        }
24
25        stage('Provision Certificate') {
26            steps {
27                tigertrustProvision(
28                    certificateName: 'deployment-cert',
29                    commonName: "app-${env.BUILD_NUMBER}.example.com",
30                    validityDays: 90,
31                    outputPath: 'certs/'
32                )
33            }
34        }
35
36        stage('Deploy') {
37            steps {
38                sh './deploy.sh'
39            }
40        }
41    }
42}

Code Signing

Sign build artifacts with enterprise code signing certificates:

groovy
1stage('Sign Application') {
2    steps {
3        tigertrustSign(
4            certificateName: 'enterprise-code-signing',
5            artifacts: [
6                'build/app.exe',
7                'build/installer.msi'
8            ],
9            signatureType: 'authenticode',
10            timestampServer: 'https://timestamp.digicert.com',
11            appendSignature: true
12        )
13    }
14}

Certificate Validation

Validate certificate compliance before deployment:

groovy
1stage('Validate Certificates') {
2    steps {
3        script {
4            def result = tigertrustValidate(
5                certificates: 'deploy/certs/*.pem',
6                policy: 'production-policy',
7                failOnViolation: true
8            )
9
10            if (result.violations > 0) {
11                error "Certificate policy violations detected"
12            }
13        }
14    }
15}

Credential Binding

Securely access certificates in pipelines:

groovy
1pipeline {
2    agent any
3
4    stages {
5        stage('Deploy with TLS') {
6            steps {
7                withCredentials([
8                    tigertrustCertificate(
9                        credentialsId: 'app-tls-cert',
10                        certVariable: 'TLS_CERT',
11                        keyVariable: 'TLS_KEY'
12                    )
13                ]) {
14                    sh '''
15                        kubectl create secret tls app-tls \
16                            --cert=$TLS_CERT \
17                            --key=$TLS_KEY
18                    '''
19                }
20            }
21        }
22    }
23}

Build Triggers

Trigger builds on certificate events:

groovy
1pipeline {
2    triggers {
3        tigertrustCertificateExpiring(
4            certificates: ['production-cert', 'staging-cert'],
5            daysBeforeExpiry: 30
6        )
7    }
8
9    stages {
10        stage('Renew Certificate') {
11            steps {
12                tigertrustRenew(
13                    certificateName: env.EXPIRING_CERTIFICATE
14                )
15            }
16        }
17    }
18}

Shared Libraries

Create reusable certificate functions:

groovy
1// vars/signArtifacts.groovy
2def call(Map config) {
3    tigertrustSign(
4        certificateName: config.cert ?: 'default-signing-cert',
5        artifacts: config.artifacts,
6        timestampServer: 'https://timestamp.digicert.com'
7    )
8}

Blue Ocean Visualization

TigerTrust plugin provides Blue Ocean integration:

• Visual certificate status indicators
• Signing step visualization
• Certificate expiration warnings
• Compliance report links

Integrate enterprise code signing and certificate lifecycle automation into your Jenkins pipelines with TigerTrust.