Automatically create issues from vulnerability reports

Automatically create issues from vulnerability reports

You can use Jira automations to create new issues whenever a vulnerability is reported. Follow these steps:
  1. Go to project settings, and enter the automation menu.
    2. Automation menu

  2. Create rule
    3. Create rule

  3. Add an Incoming webhook trigger and select the “No issues from the webhook” option.
    4. Use webhook

    Copy the URL and head over to the Scope menu of your group on the platform. Scroll to the “Hooks” section and add a hook using the URL copied previously.

    Go to webhooks section

    Add a webhook

  4. Add an action to create a new issue filling the fields as needed.
    5. Add an action on Jira

    You can use the following variables provided by the webhook:

    • finding_id

    • finding_title

    • group_name

    • severity_score

    • vulnerability_id

    • vulnerability_specific

    • vulnerability_where

    Create an issue on Jira


    Optionally you can add a condition in the automation, for instance, you can only create new issues for critical vulnerabilities.