Automatically create new issue of Github CodeQL vulnerabilities

[Harvey Tong]

I have Github Advance Security CodeQL in my repo, also already integrated github to Jira, and also turn on the security.  After the CodeQL scan, there has over 5000 vulnerabilities were found.

I could create issue one by one, but there are over 5000 issues, also could it be like automatically create issues whenever a new vulnerabilities found?

[Brian Kushner]

You can do an automation based on vulnerabilities found as was suggested just make sure you do a check for status is open. All vulnerabilities of all statuses are going to import. The one thing I’m struggling with is a duplicate checking logic on whether there is a similar or identical issue created based on the vulnerability. 

[Marc -Devoteam-]

Hi @Harvey Tong 

Welcome to the community.

I'm not familiar with this integration yet.

You could look at the automation trigger "Vulnerability" found and based on the severity.

Then add conditions and actions as in a normal automation rule.