The Jenkins project announced unresolved security vulnerabilities affecting the current version of this plugin (why?):Missing permission check allows enumerating credentials IDsCSRF vulnerability and missing permission checks You should probably migrate to GitHub Branch Source Plugin This plugin builds pull requests in github and report results. More up to date information is available on the: Git