Automate Jira issue creation

Tip

Do you have the Jira integration already? If not, install it .

You can use Jira’s Automation feature to create new Jira issues whenever Fluid Attacks reports a vulnerability on the platform. To leverage this feature, follow these steps:

On Jira Cloud, go to Project settings, and then choose Automation from the menu.

Click on Create rule.

Add an Incoming webhook trigger.

Enable the No issues from the webhook option.

Copy the URL and head over to your organization’s Integrations section on Fluid Attacks’ platform.
Locate the Webhooks card and click on the gear icon.

Find webhooks feature to connect with Jira on the Fluid Attacks platform

Click on either the Edit or Connect button next to the group for which you want to automate issue creation.

Manage webhooks for Jira on the Fluid Attacks platform

In the pop-up window, click on Add webhook.

Add webhook for Jira on the Fluid Attacks platform

Use the URL you copied previously and fill out the Token header and Token fields. The Token header field is optional and defaults to ‘x-api-key’.

Create a webhook for Jira on the Fluid Attacks platform

Tip

Find the descriptions of the fields in Add a webhook .

Enable the Vulnerability created event and click on Confirm.

Set webhook for Jira when vulnerabilities are reported on the Fluid Attacks platform

Back on Jira, add an action to create a new issue filling out the fields as needed.

Add an action to create Jira issues for vulnerabilities detected by Fluid Attacks

When configuring the issue, you can use the following variables provided by the webhook:

finding_id
finding_title
group_name
severity_score
severity_score_v4
vulnerability_id
vulnerability_specific
vulnerability_where

Automate Jira issue creation for vulnerabilities reported by Fluid Attacks

Tip

Free trial Search for vulnerabilities in your apps for free with Fluid Attacks’ automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan . If you prefer the Advanced plan, which includes the expertise of Fluid Attacks’ hacking team, fill out this contact form .