Corgea’s JIRA integration allows you to automatically create JIRA tickets for security issues found in your codebase. This integration streamlines the process of tracking and managing security vulnerabilities within your existing JIRA workflow.

​
Prerequisites

Before setting up the JIRA integration, ensure that you have the following:

  • A JIRA account with administrative privileges
  • Your JIRA instance URL (e.g., https://mycompany.atlassian.net)
  • A JIRA API token (How to create a JIRA API token)

​
Setting up the Integration

1

Access Integrations Page

Log in to your Corgea account and navigate to the “Integrations” page.

2

Connect JIRA

Locate the “JIRA” integration and click the “Add +” button.

3

Configure Integration

In the integration setup form, enter the following details:

  • Name: A friendly name for the integration (e.g., “My JIRA Instance”)
  • Base URL: Your JIRA instance URL (e.g., https://mycompany.atlassian.net)
  • Username: Your JIRA username
  • API Token: Your JIRA API token
  • Project Key (optional): The default JIRA project key to use when creating issues
  • Issue Type (optional): The default JIRA issue type to use when creating issues
4

Save Configuration

Click “Save” to complete the integration setup.

​
Creating JIRA Issues

1

Navigate to Issues

Navigate to the “Issues” page in Corgea and select an issue for which you want to create a JIRA ticket.

2

Access Issue Details

On the issue details page, locate the “Create Ticket” button.

3

Configure Ticket

If you haven’t specified default values for the project key and issue type during the integration setup, you’ll need to provide them here. Corgea will automatically fetch your projects and the issue types for you to select.

4

Create Ticket

Click the “Create JIRA Ticket” button. Corgea will create a new JIRA issue with the relevant details.

5

Confirm Creation

You’ll receive a confirmation message with a link to the newly created JIRA ticket.

​
Customizing JIRA Ticket Details

By default, Corgea populates the JIRA ticket with the following information:

  • Summary: The issue classification and file path (e.g., “CWE-022: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) in /app/routes.py”).
  • Description:
    • Vulnerability details (location, category, severity)
    • Issue explanation
    • Proposed fix (if available)
    • Link to the issue details page in Corgea

If you need to include additional fields or customize the ticket details, you can modify the JIRA ticket after it’s created in your JIRA instance.

​
Managing Multiple JIRA Integrations

If you have multiple JIRA instances or projects, you can set up multiple JIRA integrations in Corgea. When creating a JIRA ticket, you’ll be prompted to select the appropriate integration to use.

By integrating Corgea with JIRA, you can streamline your security vulnerability management process and ensure that critical issues are tracked and addressed within your existing workflow.