GitHub - Jira Sync Integration

[Leo]

Hi everyone!
I'm a system admin at my company and I received a request regarding the GH and Jira integration. Currently we have connected Jira and GH without a problem but a team is having issues syncronising GH Findings status with Jira Issues.

They would like that when they transition a GH Finding to an status this transitions also affects the connected Jira issue, which isn't happening. They recommended to reconnect Jira with GH but I don't think this will fix the issue.

Navigating through the forums I found out people that because of this moved away from Jira or even a third party integration partner between Jira and GitHub that makes this work, in any case we would like to avoid this and just have an organic integration between Jira and GitHub. Do you know of a possible solution for this?

[Dhiren Notani_Exalate_]

Hi @Leo ,

Thanks for posting your question here!

I am Dhiren, one of the Solutions Engineers working at Exalate.

It sounds like your team is experiencing challenges with syncing status transitions between GitHub (GH) Findings and Jira Issues. While Jira’s native integration with GitHub offers basic functionality, it often falls short when handling advanced synchronization scenarios like automatic status updates. Reconnecting Jira with GitHub is unlikely to resolve this issue, as the limitation is likely due to the capabilities of the built-in integration.

A powerful solution to address this problem is Exalate, a completely decentralized integration platform designed for flexible and customizable synchronization between systems like Jira and GitHub.

Exalate allows seamless, two-way synchronization between Jira Issues and GitHub Findings. When a status changes in GitHub, Exalate can automatically transition the connected Jira issue to the corresponding status (and vice versa).

It has a powerful scripting engine (Groovy based) which makes it highly customizable.

Thanks, Dhiren

[Leo]

Hi Dhiren,
Thank you for your advice, we in the company want to avoid any middle step on integrations which unfortunately means we won't be able to use Exalate.

I checked with Atlassian support and they informed that this is a Bug on GitHub side, when an alert is deleted in GH, no webhook is sent to Jira, for that reason a vulnerability can't change it's status and remains there.

[Erko Knoll]

If any out of the box solutions don't work out for you, you can try building the exact integration for your needs using ScriptRunner Connect, here is a template that should get you started that showcases a simple but custom integration for Jira Cloud and GitHub.

[Leo]

Thanks, the problem is that I'm not good at scripting, so I was looking for more of an App or maybe some info about the GH App and if what I was discribing should be a feature that comes with it or maybe some other options.

[Lucas Modzelewski _Lumo_]

Have you tried using the free Atlassian app for GitHub? https://marketplace.atlassian.com/apps/1219592/github-for-jira?tab=overview&hosting=cloud

[Leo]

Hi Lukasz,
We already have this App connected to our Jira instance. Is it supposed to sync GH Findings with Jira Issues? Because it doesn't seem to be doing that and so far I haven't found anyone mentioning it in the forums.