Set up the Jira integration | Fluid Attacks

Set up the Jira integration

Info on required permissions
Permissions required: To set up this integration, you need the permission “Administer Jira” on Jira Cloud.
After you have installed the Fluid Attacks app for Jira Cloud, follow these steps to set up the integration:
  1. Navigate to Manage apps, either from the notification you got after installation or from the menu accessible by clicking on the three points next to Apps in the left-side menu.
    2. Manage the connection between Jira and the Fluid Attacks platform

  2. Select Settings under Fluid Attacks in the left-side menu.
    3. Find the Fluid Attacks app settings on the Jira menu

  3. Enter an API token. To generate it, enter the user menu on the platform, click on API token and then Add token.
    4. Note on required role
    Note: To generate the API token your client role on Fluid Attacks’ platform must be either User, Vulnerability Manager or Group Manager.
  4. Carefully read Fluid Attacks' disclaimer. Please bear in mind that you are agreeing to Atlassian's data policies. Click on Confirm to proceed.
    5. Accept the Fluid Attacks disclaimer on the Jira app

You can now go back to your project and access the Fluid Attacks app from the project menu.
Access the Fluid Attacks app on your Jira project

In the app, if you are the Jira instance admin or have the permission "Administer Jira," you can see the reported vulnerabilities with their details and the options to link to a Jira issue or create a Jira issue to link.
See vulnerabilities detected by Fluid Attacks from Jira

Note on required permissions
Note: To access linked vulnerabilities and request reattacks on Jira Cloud, you must have the permission to assign or be assigned issues.
Free trial message
Free trial
Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out this contact form.