Skip to Content
IntegrationsJira

Connect Jira

Use Jira for dependency-finding tickets and selected review workflows.

Save the Jira connection

  1. Open Integrations from the dashboard sidebar and select Jira.
  2. Enter the Jira site URL, account email, API token, and default project key.
  3. Test the connection, then save it.

Secrets are write-only. After saving, CodeStax returns a site-specific Jira automation callback and reveals its webhook secret once. Copy both values before closing the dialog. You can rotate the secret later; the previous value remains valid for a limited overlap window shown by the product.

Configure dependency defaults

Open Dependencies (SCA) → Settings → Org Defaults → Jira to enable dependency tickets, choose the default project key, set the minimum severity, and control automatic ticket creation.

Use Dependencies (SCA) → Remediation → Jira to create tickets for selected findings and view the repository ticket list. CodeStax prevents duplicate ticket creation for the same finding.

Ticket content

Dependency tickets can include the vulnerability or advisory ID, severity, CVSS score, affected package and file, repository, description, remediation, and Known Exploited Vulnerabilities deadline when available.

API routes

POST /api/settings/jira
GET /api/settings/jira
POST /api/settings/jira/webhook-secret/rotate
POST /api/sca/jira/create-ticket
POST /api/sca/jira/bulk-create
GET /api/sca/jira/tickets/{repository_id}

Jira availability follows the current plan shown on the Plans and billing page.

BitbucketSlack