How can I get the repository name from the alerts generated by Dependabot?

Question

I'm using the Security feature (Security Containers), connecting Jira to Dependabot alerts, and automatically creating tickets when Dependabot detects a new vulnerability. The problem is that I can't get the repository name to use as a title or tag on my Jira ticket.

The variables I can use are the following and none of them give me the name of the github repository:

* Vulnerability - additional info content
* Vulnerability - additional info URL
* Vulnerability - description
* Vulnerability - display name
* Vulnerability - identifiers
* Vulnerability - introduced date
* Vulnerability - last update date
* Vulnerability - severity
* Vulnerability - status
* Vulnerability - type
* Vulnerability - URL

Marc -Devoteam- · Answer

Hi @ludwin_morales

Then you need to create a variable.

The variable should result in the name of the repository from the url

Do a log action to check the variable output and use the variable in the issue creation, place the variable in the description field.

clause for in variable creation:

{{vulnerability.url.substringAfter("Zuable/").substringBefore("/")}}

Marc -Devoteam- · Answer

Hi @ludwin_morales

Based on the documentation, there is no such an option.

See, jira-smart-values-security

You can raise a feature request via https://jira.atlassian.com/secure/Dashboard.jspa

ludwin_morales · Answer

I'm also trying to use the "Split", but when I add it to my automation, it doesn't work, and I get an error when trying to create the ticket:

vulnerability.url= https://github.com/Zubale/scheduled-tasks/security/dependabot/1

So I'm trying to get the repository name: scheduled-tasks

Automation:

Error: