Use the Jira App in the Marketplace to automate ticket creation in Jira, based on scorecard changes and events. You design rules that these events trigger to create tickets with the following information:
- Event name
- Description
- Link to the SecurityScorecard scorecard associated with the event
You then assign and update the ticket as you do any other Jira ticket.
Note: The capability to automatically update existing Jira tickets is in development. Automatic ticket assignment is not supported.
Prerequisites
Before you begin, make sure you have the following:
- A SecurityScorecard account with a paid plan
- A Jira account with administrative permissions, or approval to integrate the app from your Jira administrator
Install the app
Tip: The Jira App integration works with Jira Cloud or Jira Server/Data Center installations.
- Go to Automation > Automation and search for the Jira app.
- Select Install.
- Select whether you have a Jira Cloud or Jira Server/Data Center installation. If you are unsure, ask your Jira administrator.
-
Enter the requested information to authorize the connection between Jira and SecurityScorecard, and then select Confirm. The information you enter depends on your installation type:
Installation type Information to enter Jira Cloud - Your Atlassian API token. Select the link in the form to retrieve or create a token.
- Your Jira login email address.
- Your Jira site host. Log in to Jira and copy the URL from your browser navigation bar, or ask your Jira administrator for help. For example: mycompany.atlassian.net
Jira Server/Data Center - Your Atlassian personal access token. Select the link in the form for guidance to obtain the token.
- Your Jira site host. Log in to Jira and copy the URL from your browser navigation bar, or ask your Jira administrator for help. For example: mycompany.atlassian.net
- Select the Jira project you want to use.
Create a rule to activate ticket creation
Note: You can create up to 25 rules with this app integration.
To create a rule that automates ticket creation with a scorecard event:
- From the Jira App page, select Rules & Actions.
- In the drop-down list, select an option:
- Create your own custom rule.
- Use a predefined rule provided by SecurityScorecard.
- In Rule Builder, create the details of your rule:
- Enter a name to help you remember the rule.
- Select the event that triggers the rule, such as a grade drop or rise, an overall score drop or rise, or an overall score percentage drop.
- Select a scorecard or portfolio that the rule applies to.
- Select the action that the rule initiates, in this case, creating a Jira ticket.
- Select how the app groups tickets. See Choose how tickets are created.
- Save the rule.
Jira tickets are created automatically whenever the rule is triggered, with details your team uses to take action.
Choose how tickets are created
When you set the ticket creation action, choose how the app groups findings into tickets:
- Create a Jira ticket per Issue (default): Creates a single Jira ticket for each issue on your scorecard. The ticket includes a summary of all associated findings. Keep this option for summary-level tickets.
- Create a Jira ticket per Issue Finding: Creates an individual ticket for each finding. This option can create a high number of tickets, depending on the issue's finding count. Filter your rule to limit the volume of ticket creation.
SecurityScorecard tracks only the following Jira data from your app integration: the details of the event that triggered the rule, and your user name, email, and organization.
Turn off SecurityScorecard notifications for the Jira app
To disable notifications, turn off each alert individually:
- Select My Settings from your profile avatar in the top-right corner of the platform interface.
- Select the Rules tab on the left to edit, delete, or pause each rule individually.
Uninstall the Jira App integration
First, delete the rules configured for the Jira integration.
Then, on the Jira App page, select Uninstall.