Jenkins Codefresh Integration Plugin 1.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-10381.json"