Step 1: Connect JIRA to AppSecEngineer

1. Log in to AppSecEngineer

   • Open your AppSecEngineer account and navigate to Integrations.

2. Initiate JIRA Connection

   • Click on "JIRA Connect" to begin integration.

3. Enter Required Details

   • JIRA Email: Use your registered JIRA email.
   • API Token: Enter the JIRA API token (generated from your JIRA settings).
   • Cloud URL: Copy and paste your JIRA Cloud URL into the provided field.
     A Jira Integration setup screen in the AppSecEngineer platform showing fields for username, password, and cloud URL. A checkbox for "Is cloud" is selected, and a red button is visible for further setup.

4. Select Your Project

   • Choose the JIRA project you want to integrate.

5. Finalize Connection

   • Click "Add Project" to establish the integration.
     A Jira Integration setup screen on the AppSecEngineer platform displaying a dropdown menu for selecting Jira projects. The highlighted option is "Log Issues." The left sidebar contains navigation options like Dashboard, Courses, and Challenges.

Step 2: Configure JIRA Webhooks

1. Access JIRA Webhooks

   • Go to JIRA Settings → System → Webhooks.

2. Create a New Webhook

   • Click "Create Webhook" to add a new webhook.

3. Configure Webhook Parameters

   • A Jira Integration configuration screen on the AppSecEngineer platform. It displays Jira Query Language (JQL) input, a secret key, and a webhook URL. There is a toggle switch to enable or disable the integration and a red "Disconnect Jira" button. Clipboard icons are present for copying values.
     Webhook Name: Enter a name like “Comment Automation Webhook”.
     

1. Screenshot of Jira's Webhooks configuration, showing an active webhook with a specified URL and status enabled. The left sidebar displays system settings, and a "+ Create a WebHook" button is visible.
   • Webhook URL: Copy the URL from AppSecEngineer and paste it in JIRA.
     Screenshot of Jira's Webhooks configuration showing an active webhook with the URL "https://api.staging.appsecengineer.app/enterprise/webhook/jira/cm6fceha." The status is set to "Enabled." The left sidebar contains system settings like General Configuration, Troubleshooting, and Audit Log.
     
     
   • Secret Key: Copy and paste the secret key from AppSecEngineer into JIRA.
     Screenshot of Jira's Webhook settings displaying a generated secret key. A message advises users to record the secret securely, as it cannot be retrieved once the webhook is saved. The screen includes options to copy the secret or generate a new one.

2. Set Event Triggers

   • Select the Project Name as seen in AppSecEngineer.
   • Enable relevant JIRA events to trigger automation.
     The screenshot displays the Jira settings for configuring event triggers, with options to filter issue-related events based on creation, updates, and deletions

3. Save Webhook

   • Click "Create" to save your webhook.

Step 3: Automate Comment Generation & Course Suggestions

1. Choose the JIRA Project

   • Select the JIRA project where automation should apply.
     The screenshot shows a Jira dashboard for the "Log Issues" project, with task statuses and options to manage and view issues.

2. Define the Task Type

   • Set the task type to "Bug" or another relevant category.

3. Log Security Issue

   • When a security issue is logged (e.g., Template Injection vulnerability), the system will:
     ✅ Automatically generate comments within the JIRA ticket.
     ✅ Provide course recommendations based on the issue context.
     The screenshot shows the Jira issue detail view for a command injection vulnerability, with the option to add an epic (KAN-1). The task is currently unassigned, with fields to add descriptions, labels, and comments. Pinned fields and activity history are visible, and users can assign the task to themselves or add more details.

Benefits of JIRA Integration with AppSecEngineer

• Automates repetitive tasks by generating security-related comments in JIRA.
• Enhances security training with real-time, contextual course recommendations.
• Improves DevSecOps workflows by aligning JIRA ticketing with security education.

For further assistance, contact help@appsecengineer.com.