Jira github integration

[Sourav Mazumder]

I would like to set up Github for Jira app the official Atlassian one.

I have two queries.

1st: I have Jira admin access but doesn’t have access to Guthub as it is managed separately by another team.

during the installation is there anyway I can do the installation partially from Jira side and the Github admin can do the Github side authorisation ? Anyway to share url or similar to that?

2nd: By default this app has read or write access to the repos during installation. But let say a jira user doesn’t have access to a Github repo, but due this write feature, he is able to create a feature branch from Jira directly. How to restrict this? The repo is private. Im using Github org trail for now but will use Github enterprise cloud for the actual implementation. 

thanks in advance 

[Humashankar VJ · Accepted solution]

Hi @Sourav Mazumder 

1. Partial Installation Process, The Jira and GitHub integration can be handled partially by each admin, streamlining the installation process. To initiate the integration, the Jira admin should navigate to "Apps" > "Find new apps," search for "GitHub for Jira," and click "Get app" to follow the installation steps. When GitHub authorization is required, the Jira admin can copy the installation URL or authorization link and share it with the GitHub admin.

The GitHub admin can then use this link to complete the authorization process, granting the necessary permissions for the integration. This collaborative approach allows the Jira admin to initiate setup while the GitHub admin completes the authorization independently, ensuring a seamless and efficient integration process.

2. To prevent unintended access to GitHub repositories, consider the following measures when integrating Jira with GitHub. The GitHub for Jira app respects existing GitHub permissions, ensuring Jira users can only perform actions within repositories they have access to. To further restrict access, follow these security recommendations:

• During integration setup, GitHub admins can select "Only select repositories" to limit the integration to specific repositories. Verify that GitHub repository permissions are set correctly, as the app adheres to these settings. Furthermore, restrict access to specific Jira projects to control who can interact with linked GitHub repositories.
• To disable or restrict branch creation in Jira, navigate to Project settings > Features, find the "Development" section, and customize or disable the "Create Branch" feature. Even if this option is visible in Jira, users require appropriate GitHub permissions to execute the action.

For enhanced security, GitHub Enterprise Cloud offers additional enterprise-grade controls, providing more granular management of permissions and access.

To learn More:

How to integrate GitHub and Jira | TechRepublic

Integrate Jira with GitHub: Streamlining Issue Tracking and Collaboration

Hope this helps - Happy to help further!!
Thank you very much and have a great one!
Warm regards

[Sourav Mazumder]

Hi @Humashankar VJ , thanks for your suggestion. appreciate it.

I have few follow up queries as below:
"To disable or restrict branch creation in Jira, navigate to Project settings > Features, find the "Development" section, and customize or disable the "Create Branch" feature. Even if this option is visible in Jira, users require appropriate GitHub permissions to execute the action."

1. Under development, I have three options code, security and release where code is configurable. but I can't see create branch option there to disable for specific user. Can you provide the detail step here?

2. There is major security concern I have, using this plugin all the Jira users who don't have access to the organisations, can still see the repositories in create branch section. is there any way to restrict that?

I know we can use other paid plug in to do that, But keen to see if this can be achieved in this plug in. 

Thanks in advance.

[Humashankar VJ]

Hi @Sourav Mazumder 

Regarding your concerns about the GitHub for Jira app, I'd like to address two key issues. Firstly, disabling the "Create Branch" feature is currently not possible through Jira settings, as it's tied to the overall Jira-GitHub integration. To restrict branch creation, adjust permissions directly within GitHub or review the GitHub for Jira app's permissions settings.

Secondly, the app may display all integrated repositories, regardless of user permissions, posing a security risk.

The app lacks functionality to filter or restrict repository visibility based on user permissions. To mitigate this, consider updating the app, or setting repository-level permissions in GitHub, limiting linked repositories to those suitable for all Jira users, or exploring paid plugins offering better permission synchronization.

Best Regards

[Sourav Mazumder]

is it possible to stop creating the branch from Jira by creating branch protection rules in GitHub? if so, can you please guide what are the setting to be enabled in the repo branch protection rule?

[Humashankar VJ]

@Sourav Mazumder - Yes, it is possible to prevent branch creation from Jira by configuring branch protection rules in GitHub

There is a lot of discussions on this topic in the community and here is one of them - Is it possible to create a branch in Github from j...

Best Regards