I configured JIRA to receive email comments from GitHub by creating a GitHub user account whose email address is my JIRA instance's address, and creating a JIRA user account whose email address is notifications@github.com so that JIRA will recognize the GitHub sender address.
I believe this has the unintended side effect of granting access to people who might read email sent to notifications@github.com because they could request a password reset and gain access to the corresponding JIRA user account.
Instead, I'd like to make JIRA allow receiving email from notifications@github.com without granting any corresponding user access to JIRA other than to send email to it.
Is that possible? If so, how?
Alternatively, is there another way I can make GitHub notifications appear as comments on corresponding JIRA issues?