Support for Script Runner

Question

Hi ,

We are investigating to start use of Script runner plugin in our JIRA Production Environment. We would like to know if we are going to use Script runner does Atlassian will support?

Is there any security risks associated when we install script runner and start to use the plugin.

Best regards,

Ranil

Giuliano C. · Answer

From the ScriptRunner page (mentioned above)- https://marketplace.atlassian.com/plugins/com.onresolve.jira.groovy.groovyrunner, it seems that for JIRA, it will still be supported, but, the current version is the last free one. The next version of ScriptRunner for JIRA Add-on will be released on the 1st of September 2015 as a Paid-via-Atlassian Add-on.

For Confluence, from this answers thread, I could see the response of one of the Adaptavist engineers, which was:

It hasn't been intentionally prevented from working with confluence. I don't know what the issue is exactly... we don't have a CI build for SR in confluence so it doesn't greatly surprise me.

The problem with providing it for confluence is we need to have a decent amount of built-in "content", plus good documentation, which sadly we haven't had time to do thus far, or keep up to date the existing content. It's not really acceptable to put it out there and hope for the best. However it's hard to see how this could be done as a free plugin.

As you mention it's frustrating that it's out there and doesn't work, so I've removed the listing on marketplace.

Assuming that, it seems that the add-on was removed to download, once this was causing a bit of trouble for the users. With that in mind, there's some alternatives for scripting in Confluence:

* You can try to use the Bob Swift Scripting - https://marketplace.atlassian.com/plugins/org.swift.confluence.script which will also work with scripts in order to implement it in Confluence.
* You can try to follow the instructions from this answer thread which will be related to procedures to run in Confluence 5.7.x versions.

Hope it helps you, Fernando.

Nic Brough -Adaptavist- · Answer

Atlassian does not support Script Runner - it is an addon written by Jamie Echlin who now works for Adaptavist, and we support it now.

In itself, Script Runner doesn't have any security risks that we know of, and the few minor ones that have crept in were fixed as a priority.  It is a very powerful addon though, and it is possible for an admin to write scripts that could potentially pose security issues

Start at http://www.adaptavist.com/w/products-plugins/adaptavist-scriptrunner/scriptrunner-for-jira/ for support