The problem with plugins

This post details the security and maintenance challenges associated with plugin-based extensibility in CI/CD systems, using Jenkins as a primary example. It highlights risks such as security vulnerabilities in third-party plugins, brittle pipelines caused by complex dependency chains, and the significant maintenance overhead for administrators. The post contrasts this with the benefits of a more integrated, single-application approach to CI/CD.