Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit d141e76

Browse files
authored
Merge pull request Hacker0x01#110 from Hacker0x01/more-jira
WIP: More details on the new Jira features
2 parents c072514 + 249c73b commit d141e76

File tree

4 files changed

+63
-40
lines changed

4 files changed

+63
-40
lines changed

docs/changelog/2019/may.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ The HackerOne to Jira escalation template now includes all additional fields tha
1818
![additional fields wen escalating HackerOne to Jira](./images/may_2019_jira++_additional-fields.png)
1919

2020
#### Sync Attachments
21-
Jira users can now sync attachments from their HackerOne report to Jira by selecting **Synchronize attachments** in the **Select HackerOne to JIRA events** section when configuring their Jira integration.
21+
Jira users can now sync attachments from their HackerOne report to Jira by selecting **Synchronize attachments** in the **Select HackerOne to Jira events** section when configuring their Jira integration.
2222

2323
![synchronize attachments option in the jira integration](./images/may_2019_jira++_sync-attachments.png)
2424

docs/programs/jira-cloud-integration.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -10,10 +10,10 @@ You can integrate with Jira Cloud in order to sync information between your Hack
1010

1111
To integrate with Jira Cloud:
1212
1. Go to **Settings > Program > Integrations**.
13-
2. Click the **Connect with JIRA** link.
13+
2. Click the **Connect with Jira** link.
1414
![jira-server-1](./images/jira-server-1.png)
1515

16-
3. Choose **JIRA Cloud**, and you'll be redirected to Atlassian Marketplace where you can download the HackerOne for JIRA application.
16+
3. Choose **Jira Cloud**, and you'll be redirected to Atlassian Marketplace where you can download the HackerOne for Jira application.
1717

1818
![jira-server-3](./images/jira-server-3.png)
1919

@@ -31,13 +31,13 @@ To integrate with Jira Cloud:
3131

3232
7. The set up will take you to the Jira settings page where you can select which events you want to sync between HackerOne and Jira.
3333

34-
8. Configure which HackerOne projects you'd like to escalate to Jira in the **Configure HackerOne to JIRA escalation** window.
34+
8. Configure which HackerOne projects you'd like to escalate to Jira in the **Configure HackerOne to Jira escalation** window.
3535
* Select the **Allow me to select a project every time when I escalate an issue** checkbox to have the ability to select from multiple projects when creating Jira issues.
3636
* Select the Jira Priority you want to map to the corresponding HackerOne severity. This enables the right priority to be set when escalating a HackerOne report to Jira.
3737

3838
![jira-server-4a](./images/jira-server-hackerone-to-jira.png)
3939

40-
9. *(Optional)* Select which Jira actions you'd like to post onto HackerOne in the **Select JIRA to HackerOne events** window. You can choose from:
40+
9. *(Optional)* Select which Jira actions you'd like to post onto HackerOne in the **Select Jira to HackerOne events** window. You can choose from:
4141

4242
Option | Detail
4343
------ | -------
@@ -50,7 +50,7 @@ Closed issue status | Resolve the report when an issue is closed with the select
5050

5151
![jira-server-5](./images/jira-server-jira-to-hackerone.png)
5252

53-
10. *(Optional)* Select which actions in HackerOne you'd like to post to Jira in the **Select HackerOne to JIRA events** window. You can choose from:
53+
10. *(Optional)* Select which actions in HackerOne you'd like to post to Jira in the **Select HackerOne to Jira events** window. You can choose from:
5454

5555
Option | Detail
5656
------ | -------
@@ -72,7 +72,7 @@ To create Jira issues from your HackerOne report:
7272

7373
![jira-cloud-works-1](./images/jira-cloud-works-1.png)
7474

75-
3. Click **Create JIRA Issue**. A Jira ID will automatically generate.
75+
3. Click **Create Jira Issue**. A Jira ID will automatically generate.
7676

7777
![jira-cloud-works-2](./images/jira-cloud-works-2.png)
7878

docs/programs/jira-integration.md

Lines changed: 48 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -21,34 +21,22 @@ Jump to: |
2121
-------- |
2222
[Creating a Jira Issue](#creating) |
2323
[Linking HackerOne Reports to Existing Jira Tasks](#linking) |
24+
[Syncing updates from HackerOne to Jira](#hackerone-to-jira) |
25+
[Syncing updates from Jira to HackerOne](#jira-to-hackerone) |
26+
[Automatically resolving a HackerOne report](#auto-close) |
2427
[Installing the Jira integration](#installing) |
2528
</div>
2629

27-
### How it Works
28-
A HackerOne report gets triaged and escalated into Jira.
29-
![jira-integration-1](./images/jira-integration.png)
30-
31-
Hackbot automatically captures the status change and posts an internal comment on the associated HackerOne report.
32-
![jira-integration-2](./images/jira-cloud-4.png)
33-
34-
These events and directions are currently supported through the bi-directional Jira integration:
35-
36-
HackerOne to Jira | Jira to HackerOne
37-
----------------- | -------------------
38-
Comments | Comments
39-
State changes | State changes<br><br>You can select which Jira state will result in automatic closure of the HackerOne report.
40-
Rewards | Resolution changes
41-
Assignee changes | Assignee changes
42-
Public disclosure | Priority changes
43-
Report attachments |
44-
4530
<h3 id="creating">Creating a Jira Issue</h3>
4631
You can create new Jira issues for reports you receive on HackerOne.
4732

4833
To create a new Jira issue from your HackerOne report:
4934
1. Go to the HackerOne report in your inbox that you want to create a new Jira issue for.
5035
2. Click **Edit** next to <i>References</i>.
51-
3. Click **Create JIRA issue**.
36+
3. Click **Create Jira issue**.
37+
38+
![jira-integration-1](./images/jira-integration.png)
39+
5240
4. Select the project that you want the issue to link to in the dropdown. *Note: This option occurs only if you have multiple projects to select from. If you only have 1 project, the issue will automatically escalate to that project.*
5341

5442
![create jira issue](./images/create-jira.png)
@@ -74,22 +62,57 @@ To link your reports:
7462

7563
![link to jira-1](./images/link-jira-1.png)
7664

77-
3. Enter the Jira ticket reference ID in the **Link JIRA ticket** field.
78-
4. Click **Link JIRA issue**.
65+
3. Enter the Jira ticket reference ID in the **Link Jira ticket** field.
66+
4. Click **Link Jira issue**.
7967

8068
![link to jira-2](./images/link-jira-2.png)
8169

8270
The HackerOne report will now be linked to the Jira task, and all activities that are performed on the report will be synced to the corresponding task.
8371

84-
There's also another way you can link your HackerOne reports to Jira. You can:
72+
There's also another way you can link your HackerOne reports to Jira. You can:
8573
1. Go to the bottom of your HackerOne report.
8674
2. Select **Change state > Triaged** in the action picker.
8775

8876
![link to jira-3](./images/link-jira-3.png)
8977

90-
3. Enter the JIRA ticket number in the **Enter JIRA ticket #** field.
91-
4. Click **Link JIRA issue**.
78+
3. Enter the Jira ticket number in the **Enter Jira ticket #** field.
79+
4. Click **Link Jira issue**.
80+
81+
<h3 id="hackerone-to-jira">Syncing updates from HackerOne to Jira</h3>
82+
83+
With the Jira integration you can sync these report updates to Jira:
84+
- Report Comments
85+
- State changes
86+
- Rewards
87+
- Assignee changes
88+
- Public disclosure
89+
90+
All updates on a report are synced as a comment to Jira. Additionally, all actions are configureable and can be toggled from the Jira integration settings page.
91+
92+
![jira-server-6a](./images/jira-server-6a.png)
93+
94+
If you've configured your own [custom fields](/programs/custom-fields.html), you can use them in the jira integration. All custom fields automatically appear as available variables that you can use to set up the field mapping between HackerOne and Jira.
95+
96+
<h3 id="jira-to-hackerone">Syncing updates from Jira to HackerOne</h3>
97+
98+
To make sure your security team stays up to date with the changes that happen in Jira, you can sync back activities from Jira to the HackerOne report. All updates from Jira will be reflected in HackerOne as an internal comment on the associated report.
99+
100+
![jira-cloud-works-5](./images/jira-cloud-works-5.png)
101+
102+
We currently support these activities from Jira to HackerOne:
103+
- Comments
104+
- State changes
105+
- Resolution changes
106+
- Assignee changes
107+
- Priority changes
108+
109+
You can choose which events you want to synchronize from Jira as each of the activities can be toggled individually.
110+
111+
![jira-server-5](./images/jira-server-jira-to-hackerone.png)
112+
113+
<h3 id="auto-close">Automatically resolving a HackerOne report</h3>
92114

115+
You can set your integration to automatically close a HackerOne report as <i>Resolved</i> when a Jira issue closes. This enables the hacker to be notified right away when the Jira issue that's linked to the report is closed.
93116

94117
<h3 id="installing">Installing the Jira integration</h3>
95118

@@ -99,4 +122,4 @@ You can choose to integrate from 2 different types of Jira integrations:
99122
Option | Details
100123
------ | -------
101124
[Jira Cloud](jira-cloud-integration.html) | You can access Jira from anywhere in the world.
102-
[Jira Server](jira-server-integration.html)| Jira is self-hosted and can be behind a firewall or VPN.
125+
[Jira Server](jira-server-integration.html)| Jira is self-hosted and can be behind a firewall or VPN.

docs/programs/jira-server-integration.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -10,15 +10,15 @@ You can integrate with Jira Server in order to sync information between your Hac
1010

1111
To integrate with Jira Server:
1212
1. Go to **Settings > Program > Integrations**.
13-
2. Click the **Connect with JIRA** link.
13+
2. Click the **Connect with Jira** link.
1414
![jira-server-1](./images/jira-server-1.png)
1515

16-
3. Choose **JIRA Server**, and you'll be redirected to this 4-step setup screen where you can configure your Jira integration.
16+
3. Choose **Jira Server**, and you'll be redirected to this 4-step setup screen where you can configure your Jira integration.
1717
![jira-server-3](./images/jira-server-3.png)
1818

1919
![jira-server-2](./images/jira-server-2.png)
2020

21-
4. Navigate to the Application Links console of JIRA by going to **JIRA Administration > Applications > Application Links**.
21+
4. Navigate to the Application Links console of Jira by going to **Jira Administration > Applications > Application Links**.
2222

2323
> **Note:** You must be a Jira administrator in order to set up and access the Jira integration settings. After you set up your integration, you can go back to regular access on Jira.
2424
@@ -49,7 +49,7 @@ Display URL | https://hackerone.com
4949

5050
Field | Details
5151
----- | --------
52-
Consumer Key | HackerOne JIRA Client
52+
Consumer Key | HackerOne Jira Client
5353
Consumer Name | HackerOne
5454
Public Key | Copy and paste from the key below:<br><br>-----BEGIN PUBLIC KEY----<br>MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAy8H4gLqU2Lkkce11/Scn<br>zac5uLs4Wa3xkg8pwTJb4AaUXxPp5c49MVXRlGhLMeQ2Wv1AfNvxJu4gcmvUyn6Q<br>A9hD156grA7qXD3G7aX4DJ4N5ialNaDQGZCWRqxAqwrT7KoXZohbiima5bAyUjgG<br>SwdGKTIHp7djBNfWa8Wv9uDbJZkNRkhzcuJ65dmsPk0gURosCzo3FhL9e0kjVt66<br>GbTMjP02L0BZYpFhwTbHTsrw/xpmW9RRDGZ9jYNXbCeki17bYdVSdGswvamvzv5Y<br>4EBK4hV4ocs+MumEWC5lYn1zdWjXaQcDTnrQLgF1BJ//hB7l6nPSrynYCiM4ceCU<br>vo1/2p6nOvNvbBjVlRMIYbsrrUgaBT1tvdHRqTkBDpxzDEQcNBuEgxhxu7oHNDvK<br>HnZsorPPvfixqhpB3jcO9NuYujPakAV/ishjrwwQtRIRXqLAFHYYQxbzfikhi0xs<br>RJGg/kzpkmz9F93cATONpMFSVrg6a4Vxmt0Yt8zND2WNi/8qHCWN2yju2DUWLLRm<br>6MdAkz48MMTCmYXRybB+6g8a9F4YBdl2TGnWsYfQ1R/y0utRKBC+P7cQwVTP8eus<br>liA2Ts+KvYyVgD6StR629HFyNCNglm9+NuudtYdUUfIHGlEq769wLwHX3bgddqBW<br>hgko43a2w0IWTvNkga5FBcMCAwEAAQ==<br>-----END PUBLIC KEY-----
5555

@@ -58,14 +58,14 @@ Public Key | Copy and paste from the key below:<br><br>-----BEGIN PUBLIC KEY----
5858
11. Click **Save**.
5959
12. Navigate back to HackerOne and enter the URL of the Jira instance you want to authenticate with in the **Instance base URL** field in the **Configure an Application Link** step.
6060
![jira-server-14](./images/jira-server-14.png)
61-
13. Click the **Authenticate with JIRA** button to finalize the setup between HackerOne and your Jira instance.
62-
14. Configure which HackerOne projects you'd like to escalate to Jira in the **Configure HackerOne to JIRA escalation** window.
61+
13. Click the **Authenticate with Jira** button to finalize the setup between HackerOne and your Jira instance.
62+
14. Configure which HackerOne projects you'd like to escalate to Jira in the **Configure HackerOne to Jira escalation** window.
6363
* Select the **Allow me to select a project every time when I escalate an issue** checkbox to have the ability to select from multiple projects when creating Jira issues.
6464
* Select the Jira Priority you want to map to the corresponding HackerOne severity. This enables the right priority to be set when escalating a HackerOne report to Jira.
6565

6666
![jira-server-4a](./images/jira-server-hackerone-to-jira.png)
6767

68-
15. *(Optional)* Select which Jira actions you'd like to post onto HackerOne in the **Select JIRA to HackerOne events** window. You can choose from:
68+
15. *(Optional)* Select which Jira actions you'd like to post onto HackerOne in the **Select Jira to HackerOne events** window. You can choose from:
6969

7070
Option | Detail
7171
------ | -------
@@ -78,7 +78,7 @@ Closed issue status | Resolve the report when an issue is closed with the select
7878

7979
![jira-server-5](./images/jira-server-jira-to-hackerone.png)
8080

81-
16. *(Optional)* Select which actions in HackerOne you'd like to post to Jira in the **Select HackerOne to JIRA events** window. You can choose from:
81+
16. *(Optional)* Select which actions in HackerOne you'd like to post to Jira in the **Select HackerOne to Jira events** window. You can choose from:
8282

8383
Option | Detail
8484
------ | -------

0 commit comments

Comments
 (0)