Automation for Jira Security Vulnerabilities

[Rob Sung]

Hi I'm trying to build some simple automation to set the priority and due dates based on severity of the vulnerabilities.

It appears that vulnerability values cannot be used in automation.

Even though I see that there are matching issues for the given JQL (vulnerability[severity] = CRITICAL), the IF condition appears to fail.

Audit Log:

Are there known limitation in using vulnerabilities in automation? 

Thanks!

[Trudy Claspill]

Hello @Rob Sung 

Welcome to the Atlassian community.

What are the vulnerability values for the issues listed in the Audit Log?

Are you executing a JQL statement in your Trigger?

With your rule structure each issue will be checked against the first condition. If that condition is not met the rule stops processing that issue. It does not continue to checking the issue against the next condition. I believe you need to use a different structure; IF/ELSE

if vuln=crit

-- then edit

Else if vuln=high

-- then edit

Else if vuln=...

With that structure the rule will check the issue against each condition until it finds one that passes or it runs out of conditions.