Start Building for Free
CircleCI.comAcademyBlogCommunitySupport

Managing build artifacts

1+ year ago1 min read
Server v4.2
Server Admin
On This Page
  • Safe and unsafe content types
  • Allow unsafe types

Build artifacts persist data after a job is completed. They can be used for longer-term storage of your build process outputs. For example, when a Java build/test process finishes, the output of the process is saved as a .jar file. CircleCI can store this file as an artifact, keeping it available long after the process has finished.

Safe and unsafe content types

By default, only predefined artifact types are allowed to be rendered. This protects users from uploading, and potentially executing, malicious content. The 'allowed-list' is as follows:

CategorySafe Type

Text

Plain

Application

json

Image

png

Image

jpg

Image

gif

Image

bmp

Video

webm

Video

ogg

Video

mp4

Audio

webm

Audio

aac

Audio

mp4

Audio

mpeg

Audio

ogg

Audio

wav

Also, by default, the following types will be rendered as plain text:

CategoryUnsafe Type

Text

html

Text

css

Text

javascript

Text

ecmascript

Application

javascript

Application

ecmascript

Text

xml

Allow unsafe types

You can choose to allow unsafe types to be rendered, if required. Add the following to your values.yaml file:

serveUnsafeArtifacts: true

Suggest an edit to this page

Make a contribution
Learn how to contribute