Secrets in Automation

[colinmo]

When using Automation to integrate with external systems (e.g. linking Jira to Cherwell for incident<->work item triage) how do you safely manage secrets? So far I haven't found anywhere that I can store secrets in Jira and refer to them via {{ smart variables }} or similar so they're not exposed in the raw Webhook code.

[Steve Moss · Accepted solution]

I too am looking for a way to do this! I need some sort of secrets management for Jira automation. Is there perhaps a plugin for this? It would be good if there were built-in methods for achieving this, however.

[Steve Moss]

I wonder if this would work? Not played with it though and not sure if you could use as a smart value in automation? https://www.teamsecrets.io/jira

[colinmo]

Thanks Steve, that does look like it will do the job. Interesting it's locked to S3 buckets from the quick read, and good to note that someone else (ie. you) have noted this isn't provided in Jira (ie. I didn't miss anything obvious)

Cheers for pointing this out.