Unable to clone branch with a "/" in the name

[satdeveloping]

Jenkins and plugins versions report

Environment

Jenkins: 2.516.2
OS: Linux - 6.14.0-1018-aws
Java: 21.0.9 - Ubuntu (OpenJDK 64-Bit Server VM)
---
ace-editor:1.1
amazon-ecr:1.161.v1a_1e8df852d6
amazon-ecs:1.49
ansicolor:1.0.6
ant:520.vd082ecfb_16a_9
antisamy-markup-formatter:173.v680e3a_b_69ff3
apache-httpcomponents-client-4-api:4.5.14-269.vfa_2321039a_83
apache-httpcomponents-client-5-api:5.5-170.v023de017ccd7
asm-api:9.9-185.va_6c6b_3348b_c3
atlassian-jira-software-cloud:2.0.15
authentication-tokens:1.144.v5ff4a_5ec5c33
aws-credentials:254.v978a_5e206a_d7
aws-java-sdk:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-api-gateway:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-autoscaling:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-cloudformation:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-cloudfront:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-cloudwatch:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-codebuild:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-codedeploy:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-ec2:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-ecr:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-ecs:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-efs:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-elasticbeanstalk:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-elasticloadbalancingv2:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-iam:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-kinesis:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-lambda:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-logs:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-minimal:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-organizations:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-secretsmanager:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-sns:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-sqs:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-ssm:1.12.780-480.v4a_0819121a_9e
aws-java-sdk2-autoscaling:2.33.4-62.vc1a_8df64b_4c9
aws-java-sdk2-cloudformation:2.33.4-62.vc1a_8df64b_4c9
aws-java-sdk2-core:2.33.4-62.vc1a_8df64b_4c9
aws-java-sdk2-ec2:2.33.4-62.vc1a_8df64b_4c9
aws-java-sdk2-ecr:2.33.4-62.vc1a_8df64b_4c9
aws-java-sdk2-sts:2.29.34-8.v76857219b_b_92
blueocean:1.27.25
blueocean-autofavorite:1.2.5
blueocean-bitbucket-pipeline:1.27.25
blueocean-commons:1.27.25
blueocean-config:1.27.25
blueocean-core-js:1.27.25
blueocean-dashboard:1.27.25
blueocean-display-url:2.4.4
blueocean-events:1.27.25
blueocean-git-pipeline:1.27.25
blueocean-github-pipeline:1.27.25
blueocean-i18n:1.27.25
blueocean-jwt:1.27.25
blueocean-personalization:1.27.25
blueocean-pipeline-api-impl:1.27.25
blueocean-pipeline-editor:1.27.25
blueocean-pipeline-scm-api:1.27.25
blueocean-rest:1.27.25
blueocean-rest-impl:1.27.25
blueocean-web:1.27.25
bootstrap4-api:4.6.0-6
bootstrap5-api:5.3.8-890.v1c5cf4fa_178e
bouncycastle-api:2.30.1.82-277.v70ca_0b_877184
branch-api:2.1268.v044a_87612da_8
build-name-setter:2.5.1
build-timeout:1.38
caffeine-api:3.2.3-194.v31a_b_f7a_b_5a_81
checks-api:373.vfe7645102093
cloud-stats:377.vd8a_6c953e98e
cloudbees-bitbucket-branch-source:937.2.1
cloudbees-folder:6.1053.vd62fb_b_f7367b_
command-launcher:123.v37cfdc92ef67
commons-collections4-api:4.5.0-8.va_d5448ef9011
commons-compress-api:1.28.0-2
commons-lang3-api:3.19.0-104.v12125f33a_255
commons-text-api:1.14.0-194.v804a_dc3a_1b_d8
conditional-buildstep:1.5.0
config-file-provider:1006.vc7366c201f57
configuration-as-code:2006.v001a_2ca_6b_574
copyartifact:770.va_6c69e063442
coverage:2.2941.v08df75b_767f1
credentials:1453.v9b_a_29777a_b_fd
credentials-binding:702.vfe613e537e88
dashboard-view:2.543.vca_9da_3cb_9c60
data-tables-api:2.3.4-1400.vb_1e3e3c4dfc8
display-url-api:2.217.va_6b_de84cc74b_
docker-build-publish:1.4.0
docker-commons:457.v0f62a_94f11a_3
docker-java-api:3.7.0-133.v93b_8fb_c17a_77
docker-plugin:1308.vff6e33248305
docker-workflow:634.vedc7242b_eda_7
durable-task:639.vefb_3d8372f6d
ec2-fleet:4.2.2.527.v38a_8758950a_0
echarts-api:6.0.0-1146.v5c8f3b_8f0573
eddsa-api:0.3.0.1-19.vc432d923e5ee
email-ext:1933.v45cec755423f
external-monitor-job:223.vb_fddcf42c9b_3
favorite:2.253.v9b_413168133b_
flatpickr-api:4.6.13-18.vcf5f6a_5b_8468
font-awesome-api:7.0.1-859.v128d3a_efb_6e5
forensics-api:3.1754.v2a_6613b_77002
generic-webhook-trigger:2.4.1
git:5.8.1
git-client:6.4.1
git-server:137.ve0060b_432302
github:1.45.0
github-api:1.330-492.v3941a_032db_2a_
github-branch-source:1917.v9ee8a_39b_3d0d
github-checks:634.v371dc6d978a_3
global-build-stats:347.v32a_eb_0493c4f
google-login:109.v022b_cf87b_e5b_
google-oauth-plugin:1.335.ve6de40e2db_18
google-play-android-publisher:4.2
gradle:2.16.1149.v711b_998b_0532
gson-api:2.13.2-173.va_a_092315913c
handlebars:3.0.8
handy-uri-templates-2-api:2.1.8-38.vcea_5d521d5f3
htmlpublisher:427
http_request:1.23
instance-identity:203.v15e81a_1b_7a_38
ionicons-api:94.vcc3065403257
jackson2-api:2.20.1-423.v13951f6b_6532
jakarta-activation-api:2.1.4-1
jakarta-mail-api:2.1.5-1
jakarta-xml-bind-api:4.0.6-10.v9b_7e1d1fc40b_
javadoc:354.vee1a_660b_4990
javax-activation-api:1.2.0-8
javax-mail-api:1.6.2-11
jaxb:2.3.9-133.vb_ec76a_73f706
jdk-tool:83.v417146707a_3d
jenkins-design-language:1.27.25
jersey2-api:2.47-165.ve7809a_3e87e0
jjwt-api:0.11.5-120.v0268cf544b_89
jnr-posix-api:3.1.21-186.vb_7ec9b_23ce83
joda-time-api:2.14.0-149.v1c3ce991d1b_9
jquery:1.12.4-3
jquery-detached:1.2.1
jquery3-api:3.7.1-594.vb_3864f326cf0
jsch:0.2.16-95.v3eecb_55fa_b_78
json-api:20250517-173.v596efb_962a_31
json-path-api:2.10.0-202.va_9cc16c1e476
jsoup:1.21.2-66.v6ea_38164b_8a_2
junit:1369.v15da_00283f06
kubernetes:4398.vb_b_33d9e7fe23
kubernetes-client-api:7.3.1-256.v788a_0b_787114
kubernetes-credentials:206.vde31a_b_0f71a_c
lockable-resources:1438.v3c0f8c9e2060
mailer:525.v2458b_d8a_1a_71
mask-passwords:212.v4967a_a_73b_506
matrix-project:870.v9db_fcfc2f45b_
maven-plugin:3.27
metrics:4.2.37-489.vb_6db_69b_ce753
mina-sshd-api-common:2.16.0-167.va_269f38cc024
mina-sshd-api-core:2.16.0-167.va_269f38cc024
momentjs:1.1.1
monitoring:2.5.0
nodejs:1.6.6
oauth-credentials:0.657.v7d8dd90b_0382
okhttp-api:4.12.0-195.vc02552c04ffd
oss-symbols-api:424.ved751e062911
parameter-separator:296.v9b_a_90c81160d
parameterized-scheduler:285.ve611986d4c48
parameterized-trigger:873.v8b_e37dd8418f
pipeline-aws:1.45
pipeline-build-step:571.v08a_fffd4b_0ce
pipeline-github-lib:65.v203688e7727e
pipeline-graph-analysis:245.v88f03631a_b_21
pipeline-graph-view:661.v6003f4542123
pipeline-groovy-lib:787.ve2fef0efdca_6
pipeline-input-step:540.v14b_100d754dd
pipeline-milestone-step:138.v78ca_76831a_43
pipeline-model-api:2.2277.v00573e73ddf1
pipeline-model-definition:2.2277.v00573e73ddf1
pipeline-model-extensions:2.2277.v00573e73ddf1
pipeline-rest-api:2.38
pipeline-stage-step:322.vecffa_99f371c
pipeline-stage-tags-metadata:2.2277.v00573e73ddf1
pipeline-stage-view:2.38
pipeline-utility-steps:2.20.0
plain-credentials:199.v9f8e1f741799
plugin-util-api:6.1167.v022176c7e0ca_
popper-api:1.16.1-3
popper2-api:2.11.6-5
prism-api:1.30.0-609.vf0a_df102d9a_f
pubsub-light:1.19
resource-disposer:0.25
run-condition:243.v3c3f94e46a_8b_
schedule-build:667.vda_a_fe31e1659
scm-api:724.v7d839074eb_5c
script-security:1385.v7d2d9ec4d909
slack:795.v4b_9705b_e6d47
snakeyaml-api:2.5-143.v93b_c004f89de
sse-gateway:1.28
ssh-agent:386.v36cc0c7582f0
ssh-credentials:361.vb_f6760818e8c
ssh-slaves:3.1085.vc64d040efa_85
sshd:3.374.v19b_d59ce6610
startup-trigger-plugin:2.9.4
structs:362.va_b_695ef4fdf9
test-results-analyzer:309.vda_3a_a_f100542
thinBackup:2.1.3
throttle-concurrents:2.18
token-macro:477.vd4f0dc3cb_cf1
trilead-api:2.284.v1974ea_324382
uno-choice:2.8.8
variant:70.va_d9f17f859e0
webhook-step:342.v620877effe14
workflow-aggregator:608.v67378e9d3db_1
workflow-api:1384.vdc05a_48f535f
workflow-basic-steps:1098.v808b_fd7f8cf4
workflow-cps:4238.va_6fb_65c1f699
workflow-durable-task-step:1464.v2d3f5c68f84c
workflow-job:1559.va_a_533730b_ea_d
workflow-multibranch:821.vc3b_4ea_780798
workflow-scm-step:466.va_d69e602552b_
workflow-step-api:710.v3e456cc85233
workflow-support:1010.vb_b_39488a_9841
ws-cleanup:0.49
ws-ws-replacement:1.0.1
xray-connector:2.6.2

The recommended git tool is: git
using credential github-ssh-key
Cloning the remote Git repository
Cloning with configured refspecs honoured and without tags
ERROR: Error cloning remote repo 'origin'
hudson.plugins.git.GitException: Command "git fetch --no-tags --force --progress -- [git@github.com](mailto:git@github.com):my-org/my-repo.git +refs/heads/*:refs/remotes/origin/*" returned status code 128:
stdout: 
stderr: vdollar_percent_expand: unknown key %2
percent_dollar_expand: failed
fatal: Could not read from remote repository.
Please make sure you have the correct access rights
and the repository exists.
	at PluginClassLoader for git-client//org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandIn(CliGitAPIImpl.java:2861)
	at PluginClassLoader for git-client//org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandWithCredentials(CliGitAPIImpl.java:2201)
	at PluginClassLoader for git-client//org.jenkinsci.plugins.gitclient.CliGitAPIImpl$1.execute(CliGitAPIImpl.java:638)
	at PluginClassLoader for git-client//org.jenkinsci.plugins.gitclient.CliGitAPIImpl$2.execute(CliGitAPIImpl.java:880)
	at PluginClassLoader for git-client//org.jenkinsci.plugins.gitclient.RemoteGitImpl$CommandInvocationHandler$GitCommandMasterToSlaveCallable.call(RemoteGitImpl.java:173)
	at PluginClassLoader for git-client//org.jenkinsci.plugins.gitclient.RemoteGitImpl$CommandInvocationHandler$GitCommandMasterToSlaveCallable.call(RemoteGitImpl.java:164)
	at hudson.remoting.UserRequest.perform(UserRequest.java:225)
	at hudson.remoting.UserRequest.perform(UserRequest.java:50)
	at hudson.remoting.Request$2.run(Request.java:391)
	at hudson.remoting.InterceptingExecutorService.lambda$wrap$0(InterceptingExecutorService.java:81)
	at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:317)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642)
	at java.base/java.lang.Thread.run(Thread.java:1583)

What Operating System are you using (both controller, and any agents involved in the problem)?

Unbuntu

Reproduction steps

Kick of a multi-branch job relating to a branch with a / in the name, for example release/7.0

Expected Results

The job continues as expected

Actual Results

There repository/branch is unable to be cloned

Anything else?

Branches without a slash clone fine

Are you interested in contributing a fix?

No response

[MarkEWaite]

I can't duplicate the issue. We use branch names in GitHub multibranch projects and GitHub organization folders all the time. Many of the pull request build jobs on ci.jenkins.io are using "/" in the branch name. Please provide enough details so that others can duplicate the issue.

[MarkEWaite]

Closing as "not planned" because I cannot duplicate the issue. If more details are provided so that the issue can be duplicated, it can be reopened,

[satdeveloping]

I have a repo that fails in the exact same branch configuration: https://github.com/wearekadence/repro-jenkins-git-client/ and build logs for main and release/7.0

main Build logs

Branch indexing
 > /usr/bin/git rev-parse --resolve-git-dir /var/lib/jenkins/caches/git-080d3ec8fd6946b67c00f33999c93851/.git # timeout=10
Setting origin to git@github.com:wearekadence/repro-jenkins-git-client.git
 > /usr/bin/git config remote.origin.url git@github.com:wearekadence/repro-jenkins-git-client.git # timeout=10
Fetching origin...
Fetching upstream changes from origin
 > /usr/bin/git --version # timeout=10
 > git --version # 'git version 2.43.0'
 > /usr/bin/git config --get remote.origin.url # timeout=10
using GIT_SSH to set credentials GitHub SSH Key for 'kadence-bot'
Verifying host key using known hosts file
 > /usr/bin/git fetch --no-tags --force --progress -- origin +refs/heads/*:refs/remotes/origin/* # timeout=10
Seen branch in repository origin/main
Seen branch in repository origin/release/7.0
Seen 2 remote branches
Obtained build.groovy from 2cc296a128e55f6a85a92131d4a0e53d9075c3d0
[Pipeline] Start of Pipeline
[Pipeline] node
Running on EC2ArmFleet i-0dc0da25b0a3807b6
 in /home/jenkins/workspace/Playground/Stuart/repro-git-client/main
[Pipeline] {
[Pipeline] stage
[Pipeline] { (Declarative: Checkout SCM)
[Pipeline] checkout
Selected Git installation does not exist. Using Default
The recommended git tool is: NONE
using credential github-ssh-key
Cloning the remote Git repository
Cloning with configured refspecs honoured and without tags
Cloning repository git@github.com:wearekadence/repro-jenkins-git-client.git
 > /usr/bin/git init /home/jenkins/workspace/Playground/Stuart/repro-git-client/main # timeout=10
Fetching upstream changes from git@github.com:wearekadence/repro-jenkins-git-client.git
 > /usr/bin/git --version # timeout=10
 > git --version # 'git version 2.43.0'
using GIT_SSH to set credentials GitHub SSH Key for 'kadence-bot'
Verifying host key using known hosts file
 > /usr/bin/git fetch --no-tags --force --progress -- git@github.com:wearekadence/repro-jenkins-git-client.git +refs/heads/*:refs/remotes/origin/* # timeout=10
Avoid second fetch
Checking out Revision 2cc296a128e55f6a85a92131d4a0e53d9075c3d0 (main)
 > /usr/bin/git config remote.origin.url git@github.com:wearekadence/repro-jenkins-git-client.git # timeout=10
 > /usr/bin/git config --add remote.origin.fetch +refs/heads/*:refs/remotes/origin/* # timeout=10
 > /usr/bin/git config core.sparsecheckout # timeout=10
 > /usr/bin/git checkout -f 2cc296a128e55f6a85a92131d4a0e53d9075c3d0 # timeout=10
Commit message: "Merge pull request #1 from wearekadence/satdeveloping-patch-1"
 > /usr/bin/git rev-list --no-walk 2cc296a128e55f6a85a92131d4a0e53d9075c3d0 # timeout=10
[Checks API] No suitable checks publisher found.
[Pipeline] }
[Pipeline] // stage
[Pipeline] withEnv
[Pipeline] {
[Pipeline] timeout
Timeout set to expire in 1 hr 0 min
[Pipeline] {
[Pipeline] stage
[Pipeline] { (Hello)
[Pipeline] echo
Hello, World!
[Pipeline] }
[Pipeline] // stage
[Pipeline] stage
[Pipeline] { (Declarative: Post Actions)
[Pipeline] script
[Pipeline] {
[Pipeline] }
[Pipeline] // script
[Pipeline] }
[Pipeline] // stage
[Pipeline] }
[Pipeline] // timeout
[Pipeline] }
[Pipeline] // withEnv
[Pipeline] }
[Pipeline] // node
[Pipeline] End of Pipeline
[Checks API] No suitable checks publisher found.
Finished: SUCCESS

release/7.0 Build logs

Branch indexing
 > /usr/bin/git rev-parse --resolve-git-dir /var/lib/jenkins/caches/git-080d3ec8fd6946b67c00f33999c93851/.git # timeout=10
Setting origin to git@github.com:wearekadence/repro-jenkins-git-client.git
 > /usr/bin/git config remote.origin.url git@github.com:wearekadence/repro-jenkins-git-client.git # timeout=10
Fetching origin...
Fetching upstream changes from origin
 > /usr/bin/git --version # timeout=10
 > git --version # 'git version 2.43.0'
 > /usr/bin/git config --get remote.origin.url # timeout=10
using GIT_SSH to set credentials GitHub SSH Key for 'kadence-bot'
Verifying host key using known hosts file
 > /usr/bin/git fetch --no-tags --force --progress -- origin +refs/heads/*:refs/remotes/origin/* # timeout=10
Seen branch in repository origin/main
Seen branch in repository origin/release/7.0
Seen 2 remote branches
Obtained build.groovy from 2cc296a128e55f6a85a92131d4a0e53d9075c3d0
[Pipeline] Start of Pipeline
[Pipeline] node
Running on EC2ArmFleet i-012a66c6b625467bb
 in /home/jenkins/workspace/Playground/Stuart/repro-git-client/release%2F7.0
[Pipeline] {
[Pipeline] stage
[Pipeline] { (Declarative: Checkout SCM)
[Pipeline] checkout
Selected Git installation does not exist. Using Default
The recommended git tool is: NONE
using credential github-ssh-key
Cloning the remote Git repository
Cloning with configured refspecs honoured and without tags
ERROR: Error cloning remote repo 'origin'
hudson.plugins.git.GitException: Command "/usr/bin/git fetch --no-tags --force --progress -- git@github.com:wearekadence/repro-jenkins-git-client.git +refs/heads/*:refs/remotes/origin/*" returned status code 128:
stdout: 
stderr: vdollar_percent_expand: unknown key %2
percent_dollar_expand: failed
fatal: Could not read from remote repository.
Please make sure you have the correct access rights

and the repository exists.
at PluginClassLoader for git-client//org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandIn(CliGitAPIImpl.java:2861)
at PluginClassLoader for git-client//org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandWithCredentials(CliGitAPIImpl.java:2201)
at PluginClassLoader for git-client//org.jenkinsci.plugins.gitclient.CliGitAPIImpl$1.execute(CliGitAPIImpl.java:638)
at PluginClassLoader for git-client//org.jenkinsci.plugins.gitclient.CliGitAPIImpl$2.execute(CliGitAPIImpl.java:880)
at PluginClassLoader for git-client//org.jenkinsci.plugins.gitclient.RemoteGitImpl$CommandInvocationHandler$GitCommandMasterToSlaveCallable.call(RemoteGitImpl.java:173)
at PluginClassLoader for git-client//org.jenkinsci.plugins.gitclient.RemoteGitImpl$CommandInvocationHandler$GitCommandMasterToSlaveCallable.call(RemoteGitImpl.java:164)
at hudson.remoting.UserRequest.perform(UserRequest.java:225)
at hudson.remoting.UserRequest.perform(UserRequest.java:50)
at hudson.remoting.Request$2.run(Request.java:391)
at hudson.remoting.InterceptingExecutorService.lambda$wrap$0(InterceptingExecutorService.java:81)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:317)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642)
at java.base/java.lang.Thread.run(Thread.java:1583)
Suppressed: hudson.remoting.Channel$CallSiteStackTrace: Remote call to i-012a66c6b625467bb
	at hudson.remoting.Channel.attachCallSiteStackTrace(Channel.java:1916)
	at hudson.remoting.UserRequest$ExceptionResponse.retrieve(UserRequest.java:384)
	at hudson.remoting.Channel.call(Channel.java:1108)
	at PluginClassLoader for git-client//org.jenkinsci.plugins.gitclient.RemoteGitImpl$CommandInvocationHandler.execute(RemoteGitImpl.java:155)
	at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103)
	at java.base/java.lang.reflect.Method.invoke(Method.java:580)
	at PluginClassLoader for git-client//org.jenkinsci.plugins.gitclient.RemoteGitImpl$CommandInvocationHandler.invoke(RemoteGitImpl.java:140)
	at PluginClassLoader for git-client/jdk.proxy37/jdk.proxy37.$Proxy170.execute(Unknown Source)
	at PluginClassLoader for git//hudson.plugins.git.GitSCM.retrieveChanges(GitSCM.java:1220)
	at PluginClassLoader for git//hudson.plugins.git.GitSCM._checkout(GitSCM.java:1310)
	at PluginClassLoader for git//hudson.plugins.git.GitSCM.checkout(GitSCM.java:1277)
	at PluginClassLoader for workflow-scm-step//org.jenkinsci.plugins.workflow.steps.scm.SCMStep.checkout(SCMStep.java:136)
	at PluginClassLoader for workflow-scm-step//org.jenkinsci.plugins.workflow.steps.scm.SCMStep$StepExecutionImpl.run(SCMStep.java:101)
	at PluginClassLoader for workflow-scm-step//org.jenkinsci.plugins.workflow.steps.scm.SCMStep$StepExecutionImpl.run(SCMStep.java:88)
	at PluginClassLoader for workflow-step-api//org.jenkinsci.plugins.workflow.steps.SynchronousNonBlockingStepExecution.lambda$start$0(SynchronousNonBlockingStepExecution.java:49)
	at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:572)
	at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:317)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642)
	at java.base/java.lang.Thread.run(Thread.java:1583)

ERROR: Error cloning remote repo 'origin'

ERROR: Maximum checkout retry attempts reached, aborting

[Pipeline] }

[Pipeline] // stage

[Pipeline] }

[Pipeline] // node

[Pipeline] stage

[Pipeline] { (Declarative: Post Actions)

[Pipeline] script

[Pipeline] {

[Pipeline] }

[Pipeline] // script

[Pipeline] script

[Pipeline] {

[Pipeline] echo

Notify on failure

[Pipeline] }

[Pipeline] // script

[Pipeline] }

[Pipeline] // stage

[Pipeline] End of Pipeline

ERROR: Error cloning remote repo 'origin'

Finished: FAILURE

[satdeveloping]

@MarkEWaite I don't have permission to reopen the issue

[sivanesh-dsp]

This issue should be reopened - the fix in 6.4.1 has a regression with percent-encoded workspace paths

I'm experiencing the exact same error after upgrading from git-client 6.4.0 to 6.4.1:

stderr: vdollar_percent_expand: unknown key %2
percent_dollar_expand: failed
fatal: Could not read from remote repository.

Environment:

• Git version: 2.47.3
• OpenSSH version: 10.0p2 Debian-7, OpenSSL 3.5.4
• Jenkins: Running in Kubernetes
• git-client: 6.4.1 (fails), 6.4.0 (works)

Root Cause:

The SECURITY-3614 fix in 6.4.1 changed how workspace paths are passed to SSH scripts (as environment variables instead of command arguments). However, this breaks when workspace paths contain percent-encoded characters like %2F (URL-encoded /).

In my case, the multibranch pipeline creates workspaces like:

/data/workspaces/project/team/my-service/feature%2FTICKET-12345-branch@libs 

The %2F from the branch name feature/TICKET-12345-branch causes SSH to interpret %2 as an expansion token, resulting in the percent_expand: unknown key %2 error.

Why this is instance-specific:

I have multiple Jenkins instances with the same configuration. The instances where this works use a different workspace naming strategy that converts / to _ (underscores) instead of percent-encoding them:

/data/workspaces/project_feature_TICKET-12345-branch@libs  # Works - no %2F

Workaround:

Downgrading to git-client 6.4.0 resolves the issue, but this leaves the security vulnerability (SECURITY-3614) unpatched.

Request:

The security fix needs to handle percent-encoded characters in workspace paths properly. Many Jenkins installations use the default workspace naming which percent-encodes branch names with special characters.

Can this issue be reopened and investigated? The fix in 6.4.1, while addressing the security vulnerability, introduces a regression for a common Jenkins configuration pattern.

[MarkEWaite]

I have multiple Jenkins instances with the same configuration. The instances where this works use a different workspace naming strategy that converts / to _ (underscores) instead of percent-encoding them:

Please provide the details of the technique that you use to configure your workspace naming so that it percent encodes slashes in workspace names. I don't see the encoding in the jobs directory, but do see the encoding in the builds directory on my default installation.

Many Jenkins installations use the default workspace naming which percent-encodes branch names with special characters.

As far as I can tell, that is not the default workspace naming, at least not with Jenkins 2.542.

[MarkEWaite]

With help from @jtnord I was able to duplicate the issue with the following declarative Pipeline in multibranch Pipeline defined to use an SSH URL and an SSH private key:

pipeline {
    agent any
    options {
        skipDefaultCheckout true
    }
    stages {
        stage('Checkout') {
            steps {
                ws('percent%2Fencoded') {
                    checkout scm
                }
            }
        }
    }
}

[MarkEWaite]

Confirmed fixed on the stable-6.4 branch