Why GitHub for JIRA App requires the READ access to the code?

Olga Buslovich January 17, 2020

We recently  installed a new GitHub for jira app (https://marketplace.atlassian.com/apps/1219592/github-for-jira?hosting=cloud&tab=overview&_ga=2.79036369.413830701.1579034920-1535139634.1576535068) and have noticed during configuration that it seems to require a READ access to the code. If that is true, does anyone know why and if this is safed to do so.

2 answers

2 accepted

0 votes
Answer accepted
George Mihailoff January 21, 2020

Olga, this is an excellent question. I was dealing with GitHub APIs and it seems that they want you to obtain access to the code as a developer even if you don't really need it. I would blame here less Atlassian and more GitHub, but this doesn't really change anything.

Veera
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
January 21, 2020

Thanks @George Mihailoff 

Like Olga Buslovich likes this
Olga Buslovich January 21, 2020

Good to know - Thanks @George Mihailoff !

Will keep you posted on that as well.

Like Veera likes this
0 votes
Answer accepted
Veera
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
January 17, 2020

@Olga Buslovich 

You are right, GitHub for Jira app requires the READ access to the code to read the Smart Commits from your GitHub repositories and show those details in the relevant Jira issues.

Olga Buslovich January 21, 2020

Thanks for your reply, @Veera !

Any ideas if there is an option that allows you to NOT use Smart Commits if you don't  need  it or don't want it. And if so, would that removes the READ access requirements?

 

Like Veera likes this
Veera
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
January 21, 2020

Hi @Olga Buslovich 

It's possible to disable smart commits from Jira if connected using DVCS method.

Since GitHub doesn't allow DVCS method, we have to use the GitHub for Jira app which is owned and managed by GitHub.

For GitHub integration, it's not possible to disable smart commits in Jira side or Github for Jira app side. However, we can configure the app access to specific repositories.

It's worth checking with GitHub support (using below link) if there is a way to use the app without granting READ access to code. 

https://github.com/marketplace/jira-software-github

Like Olga Buslovich likes this
Olga Buslovich January 21, 2020

Thanks for the feedback and advise, @Veera !

Have submitted the question reg the READ access requirements to GitHub support. Will let you know when I hear back from them.

Best, Olga 

Like Veera likes this
Veera
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
January 21, 2020

Thanks @Olga Buslovich 

Suggest an answer

Log in or Sign up to answer