CloudBees DSL syntax

1 minute read

The CloudBees platform uses a YAML-based domain-specific language (DSL) to specify its workflows and to define reusable event-driven actions, similar to GitHub Actions (GHA). In general, CloudBees platform DSL has the same syntax and semantics as GHA, that enable users familiar with GHA to get a running start with CloudBees platform workflows.

Use the navigation links on the left pane to learn more about individual keywords. The cloudbees keyword is addressed in Use cloudbees and other context objects.

Ensure that your workflow and action code do not execute untrusted input. Use the following recommendations to harden your code against attackers:

  • Use CloudBees platform actions instead of an inline script to pass the context value to the action as an argument.

  • Store sensitive information in secrets.

  • Add a code scanner step to your workflow to check for security vulnerabilities.

  • Add the .cloudbees/workflows directory to the code owners list.

  • For inline scripts, use an intermediate environment variable to handle untrusted input.