diff --git a/Jenkinsfile b/Jenkinsfile
new file mode 100644
index 000000000..ac8093264
--- /dev/null
+++ b/Jenkinsfile
@@ -0,0 +1,35 @@
+// allow build to publish build scans to develocity-staging.eclipse.org
+def secrets = [
+  [path: 'cbi/tools.buildship/develocity.eclipse.org', secretValues: [
+    [envVar: 'DEVELOCITY_ACCESS_KEY', vaultKey: 'api-token']
+    ]
+  ]
+]
+
+pipeline {
+    agent any
+
+    tools {
+        // https://github.com/eclipse-cbi/jiro/wiki/Tools-(JDK,-Maven,-Ant)#jdk
+        jdk 'temurin-jdk11-latest'
+    }
+
+    environment {
+        CI = "true"
+    }
+
+     triggers {
+        githubPush()
+    }
+    
+     stages {
+        stage('Gradle Help') {
+            steps {
+                withVault([vaultSecrets: secrets]) {
+                    sh './gradlew help --scan' 
+                }
+                
+            }
+        }
+    }
+}
\ No newline at end of file
diff --git a/settings.gradle b/settings.gradle
index 99e32edd7..171981623 100644
--- a/settings.gradle
+++ b/settings.gradle
@@ -1,6 +1,6 @@
 // publish build scans from CI builds
 plugins {
-    id "com.gradle.develocity" version "3.18.1"
+    id "com.gradle.develocity" version "3.19"
     id 'com.gradle.common-custom-user-data-gradle-plugin' version '2.0.2'
 }
 
@@ -9,8 +9,8 @@ def isCI = System.getenv('CI') != null
 
 develocity {
     server = "https://develocity-staging.eclipse.org"
+    allowUntrustedServer = false // ensure a trusted certificate is configured
     buildScan {
-        publishing.onlyIf { true }
         obfuscation {
             username { name -> isCI ? 'ci' : 'local' }
             ipAddresses { addresses -> addresses.collect { address -> "0.0.0.0" } }