CloudBees DSL syntax

1 minute read

The CloudBees platform uses a YAML-based domain-specific language (DSL) to specify its workflows and to define reusable event-driven actions, similar to GitHub Actions (GHA). In general, CloudBees platform DSL has the same syntax and semantics as GHA, that enable users familiar with GHA to get a running start with CloudBees platform workflows.

Use the navigation links on the left pane to learn more about individual keywords. The cloudbees keyword is addressed in `cloudbees` and other context objects.

Ensure that your workflow and action code do not execute untrusted input. Use the following recommendations to harden your code against attackers:

  • Use CloudBees platform actions instead of an inline script to pass the context value to the action as an argument.

  • Store sensitive information in secrets.

  • Add a code scanner step to your workflow to check for security vulnerabilities.

  • Add the .cloudbees/workflows directory to the code owners list.

  • For inline scripts, use an intermediate environment variable to handle untrusted input.