[JENKINS-76302] Support CSP in GitHubOrgMetadataAction

[jenkins-infra-bot]

Reported in jenkinsci/jenkins#11269 (comment) and previously mentioned in that PR's description.

GitHubOrgMetadataAction needs to ensure avatar domains are allowed sources for images in CSP directives.

---

Originally reported by danielbeck, imported from: Support CSP in GitHubOrgMetadataAction

• assignee: danielbeck
• status: Closed
• priority: Major
• component(s): github-branch-source-plugin
• label(s): CSP
• resolution: Fixed
• resolved: 2025-11-25T18:02:05+00:00
• votes: 0
• watchers: 1
• imported: 2025-12-02

Raw content of original issue

Reported in jenkinsci/jenkins#11269 (comment) and previously mentioned in that PR's description.

GitHubOrgMetadataAction needs to ensure avatar domains are allowed sources for images in CSP directives.

[jenkins-infra-bot]

• Remote link associated with this issue:

  • PR#​917

[daniel-beck]

Fixed in https://github.com/jenkinsci/github-branch-source-plugin/releases/tag/1925.v62fb_7ffb_08ce

[timja]

[Original epic from Jira: JENKINS-60865]