Team,

The GitHub Pull Request Builder (GHPRB) plugin will be removed from all Jenkins instances (ci-int, ci-ext, ci-stage) by end of March 2026. This is a security-driven change with no exceptions.

Why

The GHPRB plugin is deprecated, unmaintained, and contains known security vulnerabilities [1]. Continued use poses unacceptable risk to our infrastructure and blocks our ability to properly upgrade other Jenkins plugins due to shared dependencies.

Affected Jobs

Your service has the following Jenkins jobs that must be migrated:

• Name: insights-dashboard
  Job: RedHatInsights-insights-dashboard-pr-check (ci-ext)
  Template: insights-gh-pr-check
  File: data/services/insights/frontend-base/cicd/ci-ext/jobs.yaml

• Name: api-frontend
  Job: RedHatInsights-api-frontend-pr-check (ci-ext)
  Template: insights-gh-pr-check
  File: data/services/insights/frontend-base/cicd/ci-ext/jobs.yaml

• Name: frontend-assets
  Job: RedHatInsights-frontend-assets-pr-check (ci-ext)
  Template: insights-gh-pr-check
  File: data/services/insights/frontend-base/cicd/ci-ext/jobs.yaml

• Name: frontend-assets
  Job: RedHatInsights-frontend-assets-vulnerability-scan-master (ci-ext)
  Template: platsec-gh-vulnerability-scan
  File: data/services/insights/frontend-base/cicd/ci-ext/jobs.yaml

• Name: frontend-starter-app
  Job: RedHatInsights-frontend-starter-app-pr-check (ci-ext)
  Template: insights-gh-pr-check
  File: data/services/insights/frontend-base/cicd/ci-ext/jobs.yaml

• Name: learning-resources
  Job: RedHatInsights-learning-resources-pr-check (ci-ext)
  Template: insights-gh-pr-check
  File: data/services/insights/frontend-base/cicd/ci-ext/jobs.yaml

• Name: service-accounts
  Job: RedHatInsights-service-accounts-pr-check (ci-ext)
  Template: insights-gh-pr-check
  File: data/services/insights/frontend-base/cicd/ci-ext/jobs.yaml

• Name: sandbox
  Job: RedHatInsights-developer-sandbox-ui-pr-check (ci-ext)
  Template: insights-gh-pr-check
  File: data/services/insights/frontend-base/cicd/ci-ext/jobs.yaml

• Name: widget-layout
  Job: RedHatInsights-widget-layout-pr-check (ci-ext)
  Template: insights-gh-pr-check
  File: data/services/insights/frontend-base/cicd/ci-ext/jobs.yaml

• Name: better-platform-docs
  Job: RedHatInsights-better-platform-docs-pr-check (ci-int)
  Template: insights-gh-pr-check
  File: data/services/insights/frontend-base/cicd/ci-int/jobs.yaml

• Name: better-platform-docs
  Job: RedHatInsights-better-platform-docs-vulnerability-scan-main (ci-int)
  Template: platsec-gh-vulnerability-scan
  File: data/services/insights/frontend-base/cicd/ci-int/jobs.yaml

• Name: insights-frontend-builder-common
  Job: insights-frontend-builder-common-pipeline-pr-check-master (ci-int)
  Template: insights-gh-pipeline
  File: data/services/insights/frontend-base/cicd/ci-int/jobs.yaml

• Name: cypress-e2e-image
  Job: RedHatInsights-cypress-e2e-image-pr-check (ci-int)
  Template: insights-gh-pr-check
  File: data/services/insights/frontend-base/cicd/ci-int/jobs.yaml

• Name: insights-chrome
  Job: insights-chrome-pipeline-pr-check-frontends-master (ci-int)
  Template: insights-gh-pipeline-frontends
  File: data/services/insights/frontend-base/cicd/ci-int/jobs.yaml

• Name: landing-page-frontend
  Job: RedHatInsights-landing-page-frontend-pr-check (ci-int)
  Template: insights-gh-pr-check
  File: data/services/insights/frontend-base/cicd/ci-int/jobs.yaml

• Name: insights-dashboard
  Job: RedHatInsights-insights-dashboard-pr-check (ci-int)
  Template: insights-gh-pr-check
  File: data/services/insights/frontend-base/cicd/ci-int/jobs.yaml

• Name: cloud-services-config
  Job: RedHatInsights-cloud-services-config-pr-check (ci-int)
  Template: insights-gh-pr-check
  File: data/services/insights/frontend-base/cicd/ci-int/jobs.yaml

• Name: registration-assistant
  Job: RedHatInsights-registration-assistant-pr-check (ci-int)
  Template: insights-gh-pr-check
  File: data/services/insights/frontend-base/cicd/ci-int/jobs.yaml

• Name: access-requests
  Job: RedHatInsights-access-requests-frontend-pr-check (ci-int)
  Template: insights-gh-pr-check
  File: data/services/insights/frontend-base/cicd/ci-int/jobs.yaml

Migration Options

Option 1: Konflux (Preferred)

Migrate to Konflux for PR checks and builds. This aligns with Red Hat's CI/CD strategy [2].

Option 2: GitHub Branch Source Plugin

If you must remain on Jenkins, migrate to the GitHub Branch Source plugin. This replaces BOTH pr-check and build jobs with a single multibranch pipeline [3].

Key differences:

• Uses Jenkinsfile in your repository
• Single job handles PRs and branch builds
• Supports GitHub merge queues
• More secure permission model

Documentation: https://gitlab.cee.redhat.com/service/app-interface/-/tree/master/docs/app-sre/github-branch-source-plugin-jobs

Action Required

1. Review the affected jobs listed above
2. Choose migration path (Konflux or GitHub Branch Source)
3. Complete migration by March 31, 2026
4. A JIRA ticket will be created to track the migration of the jobs in your project. Please close it when the work is done.

Support

Questions? Reach out via [4].

[1] https://plugins.jenkins.io/ghprb/
[2] https://docs.engineering.redhat.com/display/KONFLUX/Konflux+Documentation
[3] https://plugins.jenkins.io/github-branch-source/
[4] https://gitlab.cee.redhat.com/service/app-interface/-/blob/master/FAQ.md#contacting-appsre

AppSRE Team