Skip to content

Jira

Configure JIRA Integration

Ostorlab offers the possibility to easily manage vulnerabilities using Ostorlab tickets and seamlessly sync them with Jira.

The Jira configuration can either be done:

  1. At the organization level, each Ostorlab ticket will be synced either one way or two ways to Jira.

  2. At the ticket level, only chosen tickets are synced either one way or two ways to Jira.

JIRA Configuration:

To enable Jira integration, the organization must have an enterprise subscription.

Enable Jira Integration

To connect to the JIRA workspace, we will be using the username and the API key.

Create Jira Api key:

  1. Access the API Token Authentication menu.
  2. Create an API token. img.png img.png
  3. Copy and paste the generated key. img.png

Connect Jira Integration:

img.png img.png img.png img.png img.png 1. Add your username. img.png 2. Add the Jira Api key. img.png 3. Add your Jira workspace URL. img.png

You can save the configuration and test the connection to the workspace. img.png All the tests should pass except the create issue one.

Test Jira Connection

NOTE: If your Jira instance is behind a firewall, you can contact the support team to provide the range of IPs to whitelist.

Once the JIRA connection is working, you can either apply the configuration at the organization level to all the tickets or open the ticket you would like to sync and configure it.

Automatically create Jira issues from Ostorlab tickets:

Go to Jira Integration menu Library -> Integrations -> Jira -> Configurations.

Make sure the steps in Connect Jira configuration are done and the connection check is passing.

To enable the automatic creation of JIRA tickets, you need to switch ON the toggle button.

Automatic Jira ticket creation

You can also choose to:

  • Sync the updates from Ostorlab to Jira.
  • Sync updates from Jira to Ostorlab*.

* A Jira Webhook will be created to listen to the issues updates. Make sure, the user has the right permissions to create a hook.

Once the Sync modes are configured, you need to choose:

  • The default Jira project to use for the issues.
  • The default issue type to use.
  • The fields to sync.
  • The tickets risk ratings to sync to JIRA.
  • Click on Save img.png Click on Yes if you want to migrate the existing tickets to JIRA img.png Ensure the user has the proper permissions to create Jira issues and correct the issue type.

You can click on the test button to check if the integration is able to write issue to the Jira project. img.png

Test All Jira configuration

How to automatically create Jira issue per Ostorlab ticket:

You can also create a Jira issue for a specific ticket, for that, you can follow these steps:

  • Make sure the steps in Connect Jira configuration are done and the connection check is passing.
  • Open the ticket you would like to sync.

  • Click on the Jira button. Jira button

  • Select the Jira project to use.

  • Select the issue type to use.
  • Sync the updates from Ostorlab to Jira.
  • Sync updates from Jira to Ostorlab.
  • Select the fields to sync.
  • Click on save.

Use an existing Jira ticket

If you would like to manually create a Jira ticket and only reference it in Ostorlab, you can follow these steps:

  • Open the ticket.
  • Click on the Jira button.
  • Go to the SET tab. Jira Set link
  • Paste the Jira link.
  • Click on save.

Now you can access the Jira issue for the button the right. Jira link

NOTE: When using the Jira link, you can only access the Jira from Ostorlab but the data will not be synced.

IP Whitelisting

If you would like to whitelist Ostorlab Jira clients communicating with your Jira instance, you can whitelist the IP resolved by the DNS record jira-whitelist.ostorlab.app. At the time of writing, that list resolves to:

jira-whitelist.ostorlab.app. 300 IN A   146.148.19.46
jira-whitelist.ostorlab.app. 300 IN A   34.140.205.46
jira-whitelist.ostorlab.app. 300 IN A   35.205.186.79
jira-whitelist.ostorlab.app. 300 IN A   34.140.92.37
jira-whitelist.ostorlab.app. 300 IN A   34.77.170.4