Plugins Security

Hi, we want to use a JIra plugin which is not supported. How was wondering what are the security implications of using any JIRA plgin and how do I mitigate risks to our business.

Do Atlassian do due diligence on these plugins, I am unable to find anything relevant on this topic except one post.

Kind Regards

1 answer

1 vote

An "unsupported" plugin could be doing anything. Atlassian verified ones have been through some security tests, and are known to be backed by trusted organisations, but unsupported leaves the door completely open.

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

Thanks for the input now if I see this plugin.

https://marketplace.atlassian.com/apps/288/jira-charting-plugin?hosting=server&tab=overview

Its says its from Atlassian but unsupported. How would it fit with your response.

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

Exactly the same. But as it's by Atlassian, it's not going to be malicious.

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Forums

Product Q&A

Community resources

Support

Top groups

Community resources

Support

Learn

Community resources

Support

Events

Community resources

Support

Plugins Security

1 answer

Suggest an answer

Was this helpful?

Thanks!

TAGS

Community showcase

Atlassian Community Events