It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

Why GitHub for JIRA App requires the READ access to the code?

We recently  installed a new GitHub for jira app (https://marketplace.atlassian.com/apps/1219592/github-for-jira?hosting=cloud&tab=overview&_ga=2.79036369.413830701.1579034920-1535139634.1576535068) and have noticed during configuration that it seems to require a READ access to the code. If that is true, does anyone know why and if this is safed to do so.

2 answers

2 accepted

0 votes
Answer accepted
Veera Atlassian Team Jan 17, 2020

@Olga Buslovich 

You are right, GitHub for Jira app requires the READ access to the code to read the Smart Commits from your GitHub repositories and show those details in the relevant Jira issues.

Thanks for your reply, @Veera !

Any ideas if there is an option that allows you to NOT use Smart Commits if you don't  need  it or don't want it. And if so, would that removes the READ access requirements?

 

Like Veera likes this

Hi @Olga Buslovich 

It's possible to disable smart commits from Jira if connected using DVCS method.

Since GitHub doesn't allow DVCS method, we have to use the GitHub for Jira app which is owned and managed by GitHub.

For GitHub integration, it's not possible to disable smart commits in Jira side or Github for Jira app side. However, we can configure the app access to specific repositories.

It's worth checking with GitHub support (using below link) if there is a way to use the app without granting READ access to code. 

https://github.com/marketplace/jira-software-github

Like Olga Buslovich likes this

Thanks for the feedback and advise, @Veera !

Have submitted the question reg the READ access requirements to GitHub support. Will let you know when I hear back from them.

Best, Olga 

Like Veera likes this
Veera Atlassian Team Jan 21, 2020

Thanks @Olga Buslovich 

0 votes
Answer accepted

Olga, this is an excellent question. I was dealing with GitHub APIs and it seems that they want you to obtain access to the code as a developer even if you don't really need it. I would blame here less Atlassian and more GitHub, but this doesn't really change anything.

Veera Atlassian Team Jan 21, 2020

Thanks @George Mihailoff 

Like Olga Buslovich likes this

Good to know - Thanks @George Mihailoff !

Will keep you posted on that as well.

Like Veera likes this

Suggest an answer

Log in or Sign up to answer
TAGS

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you