App Installation Guide
The Jira App for SecurityScorecard empowers your team to work productively, ensuring that you never miss a Scorecard change. The Jira app for SecurityScorecard extends the power of Rule Builder with the ability to set up automatic ticket creation and assignment in Jira based on Scorecard changes and events. When your designated event is triggered, a Jira ticket will be created and assigned, including more details on the event and a link to SecurityScorecard.
This guide will go over how to set up the app and automate tickets in Jira.
Before you get started
Getting started with the Jira App for SecurityScorecard is easy. In order to install it, the following items are required:
SecurityScorecard license on business or corporate plan can set up Jira integration
Jira Account on Jira Cloud. Note at this time, the Jira integration is not compatible with on premise installations of Jira.
- Have your Jira account login information
- You must be an administrator for your Jira or request approval from your administrator
How to Set up the Jira App
Setting up the App is easy. Follow the instructions below or on this video to get started.
- Log into SecurityScorecard.
- In the navigation bar, select the Integrations drop-down and select Marketplace.
- This will lead you to our Marketplace, where you can explore our Apps, Integrations, and Data Partners. Select Jira App to access the installation page for the app.
- Select the Install button
- Next, you will need to authorize the connection between Jira and SecurityScorecard.
- Once authorization is successfully granted, you will be returned to the SecurityScorecard platform and the Jira connection will be completed.
Set up Notifications in Jira
Once the installation is complete, you can set up notifications from SecurityScorecard to your designated Slack channel.
- From the Jira App page, select Rules & Actions.
- In the Create a new app integration rule drop down, you will see the option to create your own custom rule or leverage one of the pre-defined rules provided by SecurityScorecard.
- Once you select an option, you will be led to Rule Builder to customize and save your rule. Alternatively, you can always access our Rule Builder by going to My Settings and selecting Rules.
- In our Rule Builder, you can create and edit rules to receive Jira tickets. You will need to fill out the following fields to create rules that alert you in Jira:
- Rule Name: what you want to call your rule
- Event: select the event that will trigger a rule, such as a grade drop or rise, overall score drop or rise, or overall score percentage drop.
- For: select who this rule applies to, such as your Scorecard, any followed Scorecard, or a specific Portfolio.
Action: Select the action(s) to take place when the rule is triggered. In order to have tickets created in Jira, select the Notify Channel from the Action list.
- When you are done building your rule, click Save.
Jira tickets will now automatically be created every time the rule is triggered, with more details for your team to take action.
And that’s it! You will now receive SecurityScorecard alerts in Jira!
Can I designate who a ticket is assigned to?
When a new event is triggered in Security Scorecard , we push the following into Jira:
- Event name
- Link to the Security Scorecard associated with the event
The ticket is automatically created with the selected project name in the backlog.
- Currently, we do not provide an option to configure the ticket assignee.
Is there a limit to the number of rules a user can create?
Currently, users can create up to 25 Rules.
Who has access to the Jira integrations?
The Jira integration is available for all Business and Enterprise customers.
How can you turn off SecurityScorecard notifications?
You will have to turn off each of the alerts individually:
Select My Settings from the profile icon in the top navigation
Select the Rules tab from the left, you can edit, delete or pause each rule individually.
How can I uninstall Jira integration?
- All the rules configured for Jira will need to be deleted in order to disable the Security Scorecard notifications. As advised in the How can you turn off SecurityScorecard notifications?
- Select uninstall.
Will SecurityScorecard see my Jira data?
- The only things we track are:
- Details of the event that triggered the rule
- Your username, email, and organization
Will the ticket be automatically updated?
- Today, the app creates a new jira ticket every time it executes, describing the event that triggered the rule.
The capability to automatically update existing Jira tickets will be added soon.
We would love to hear any feedback you have regarding rule builder and slack integration. Please contact firstname.lastname@example.org.