Jenkins Agent Hardening: Lock Down Build Execution
The Jenkins project documents the controller/agent trust model in its controller isolation guide. The short version is that anyone who can change a pipeline can execute code on an agent, so agents are a trust boundary. This guide applies…