Jira

Connect Jira to hand work off to the tracker your team already lives in. With Jira connected, you can create issues directly from BestDefense findings and from SonarQube code-quality issues, and link a merged remediation pull request back to the ticket it resolved.

Note

The Jira integration generally requires a Growth tier or higher. Check the current requirement and pricing in the app.

Connect Jira

Go to Integrations and open the Jira card. You can connect either flavor of Jira:

• Jira Cloud — choose Connect and authorize BestDefense through Atlassian. You’re returned to BestDefense and the card shows Connected.
• Self-hosted Jira — enter your Jira URL and an API token.

Like every integration, the Jira connection is configured per organization.

Create a ticket from a finding

Open a finding (or a finding group) and choose the option to create a Jira issue. You then pick:

• The project to create the issue in.
• The issue type (for example, Bug or Task).
• The fields to fill in for the new issue.

You can create a ticket for a single finding, or create one for an entire finding group to cover related issues in a single ticket.

Create a ticket from a code-quality issue

If you’ve connected SonarQube, you can create Jira issues from code-quality issues the same way — pick the project, issue type, and fields, and BestDefense files the ticket.

Link a merged fix back to its ticket

When a remediation pull request is merged, BestDefense can link that fix back to the related Jira ticket, so the people working in Jira can see that the finding was resolved by a real code change.

Tip

Use Jira tickets for findings you want to schedule and triage in your normal workflow, and Accept the risk for findings you’ve decided not to fix right now.