Jira Server and Data Center
You can use the Veracode Integration for Jira to import to Jira Server and to Jira Data Center security flaws that Veracode identifies in your application.
Veracode Integration for Jira manages the import of security findings from Veracode and creates issues in Jira for each imported findings. Veracode also provides the Veracode Integration for Jira Cloud, which provides the same functionality for Jira Cloud.
The Jira integration assigns each unique application finding to a unique Jira issue, created in the designated Jira project. Import criteria can include all open findings from all scans, all findings that affect policy, all unmitigated findings from the most recent scan, or other criteria.
You can choose to import findings on a one-time basis or selectively choose which findings to import. You can also schedule findings imports on an hourly, daily, or weekly basis. You can import findings from a specific application scan or from all your application scans. The integration can also update findings comments on the Veracode Platform, but cannot mitigate findings from within the Jira integration.
To keep the status of imported findings in your ticketing system in sync with the status of the actual findings in the Veracode Platform, you must routinely run the integration.
Supported versions
Veracode has tested the following versions, but the integration might work with other versions.
Jira Server or Jira Data Center 8.13.0–9.17.1
Unsupported versions: 9.8.x, 9.9.x, and 9.10.x
Supported libraries
Veracode has tested the following versions, but the integration might work with other versions.
Java 8 and 11
Jira users
There are two types of Jira users that interact with the Jira integration. You need to be aware of these user types when installing and using the integration.
- Jira user: this user is an account inside of Jira with permissions to create and modify all Jira issues for all projects to which you are importing flaws.
- Veracode user: this user has access to the Veracode Platform. The integration can only import findings for applications that this user can access. Veracode recommends that this user is an API service account.