English

Jira Cloud

This one-time setup per workspace allows everyone in your Aikido organization to create issues directly in Jira Cloud.

Following use cases are supported :

  • Automated Ticket Creation: Automatically create and push tickets to specified Jira projects for seamless tracking of security issues.
  • Manual Ticket Addition: Manually add security issue tickets to Jira, ensuring targeted attention for critical vulnerabilities.

Note: the ticket creation is linked to the user who has set up the integration. We recommend creating an extra 'Aikido' user inside Jira with write access to all projects.

Connecting the Aikido App to Jira

  1. Navigate to Integration Settings within the Aikido app.

  2. In the 'Task Trackers' section, select 'Jira Issues'

  3. A prompt will request authorization for Jira.
    ​

    Jira access unauthorized; prompt to authorize account for issue-tracking integration.

  4. Login into your Jira account

  5. Grant Aikido permission to access your Jira workspace

    Aikido Security requests permission to access and manage your Atlassian Jira account.

  6. Once authorized, Aikido is successfully connected to Jira, enhancing your task management capabilities 🚀

​Options for Task Creation in Jira via Aikido

There are two different options to create new tasks from Aikido into Jira.

  1. Manually create tasks from the Aikido interface
  2. Automatically create new tasks via Aikido's auto creation functionality.

1. Manual Task Creation

  1. Hover over any issue in your feed and click the + in the assign column.

    Task management table with “Assignee” column and options to add or edit entries.

    Alternatively, you can click the triple dots in the last columns to open up the action menu. If you have grouped issues, the triple dot action menu is available on every subissue.

    Menu of task management actions: create, snooze, ignore, copy link, adjust severity.

  2. Fill in the required details in the popup modal.
    ​

    Jira task creation form detailing a critical security vulnerability.

  3. The newly created task in Jira will be linked in the Aikido Issue Detail under the 'Tasks' tab (sidepanel).

Critical security task: var_dump() may expose sensitive user information; action required.

2. Automated Task Creation

Aikido will automatically create tasks every hour in bulk. There is at the moment no option to trigger this manually.

  1. Go to the Jira Integration settings
  2. Make sure to enable 'Autocreation' by clicking the toggle to On.
  3. Define the criteria for automatic task creation.

You can configure all of these settings in the autocreation modal:

  • On/Off: Enable or disable autocreation. When off, the threshold is effectively set to None.
  • Severity threshold: Create tickets for issues at Critical, High, Medium, or Low and above. For example, High creates tickets for High and Critical.
  • Issue types: Create tickets for all issue types, or limit them to specific types like SCA, SAST, Secrets, Cloud, IaC, Malware, or License.
  • Daily limit: Set the maximum number of tickets created per day. The default is 25. Some plans support higher limits.
  • Ticket creation mode: Create one ticket per issue group, or create separate tickets per location or scope. Per-location mode can create more tickets.
  • Scope: Available only in per-location mode. Target all repos or clouds, only mapped repos or teams, or specific repos or clouds with include and exclude lists.
  1. Aikido will autonomously generate Jira tickets hourly until the configured daily limit of tasks is reached

Jira Sync Information

Aikido automatically syncs a couple of fields to Jira

  • Severity is mapped to the 'Priority field' in Jira (one way)
  • Assignees are synced both ways (so updates in Jira will be reflected in Aikido too