Jira Setup | HackerOne Help Center

This feature is for Professional and Enterprise programs only

Note: To configure your Jira integration, you must be an admin on Jira to properly have webhooks installed. After your integration has properly been set up, you can go back to regular access on Jira.

You can integrate with Jira to sync information between your HackerOne report and your Jira issue.

To integrate with Jira:

Go to Program Settings > Program > Integrations.
Click the Connect with Jira link.
Click the Set up new integration button.
Enter Name and Description for your new integration and click Next.
Navigate to the Application Links console of Jira by going to Settings > Products > Application Links.
1. Note: You must be a Jira administrator to set up and access the Jira integration settings. After you set up your integration, you can go back to regular access on Jira.
Enter https://hackerone.com and click Create new link.
Enter https://hackerone.com in the New URL field in the Configure Application URL window.
Enter the following information on the Link applications window and click Continue.
1. Application Name: HackerOne
  Application Type: Generic Application
  Service Provider Name: HackerOne
  Consumer key: HackerOne JIRA Client
  Shared secret: Enter any string and save it for later use (case-sensitive).
  Request token URL: https://hackerone.com
  Access token URL: https://hackerone.com
  Authorize URL: https://hackerone.com
  Create incoming link: Check the checkbox

Enter the following information on the next Link applications window:

Consumer Key: HackerOne JIRA Client
Consumer Name: HackerOne
Public Key: Copy and paste from the key below

HackerOne Jira public key

Click Continue.
Navigate back to HackerOne and click Add a new account in the Jira authentication window.
Enter your Jira instance URL and the shared secret from step 8 in the Create a new authentication window and click Create.

Note: When setting up, make sure to use the credentials associated with the account designated for creating JIRA tickets through HackerOne. For example, if using a service account, ensure you've logged out of your personal Atlassian account before proceeding.
Click Next to finalize the setup between HackerOne and your Jira instance.
Configure which Jira project and issue type you'd like to escalate HackerOne reports to in the Jira project and issue type window and click Next.
Select the HackerOne fields you want to map to the corresponding Jira fields. Alternatively, enter any text using integration variables. Click Next.
1. Note: only supported Jira field types are shown.
2. Note: alternatively you can manually set the mapping to a single field or combination of fields from the integration variables.
  For example: {{triage_summary}} \\ Link: {{report_link}} \\ Date: {{submission_date}} \\ Reporter: {{reporter_name}} \\ Weakness: {{weakness}} Would create a combination of the triage summary, a link to the report the submission date, the reporter name, and the weakness of their report and map that to a single field.
(Optional) Select the Jira Priorities you want to map to the corresponding HackerOne Severities. This enables the right priority to be set when escalating a HackerOne report to Jira.
(Optional) Select which actions in HackerOne you'd like to post to Jira in the Select HackerOne to Jira events window. You can choose from:
1. Comments: When someone comments on a report, post an update on the associated Jira issue.
2. State changes: When someone changes the state of a report, post an update on the associated Jira issue.
3. Rewards: When someone awards or suggests a bounty and/or bonus, post an update on the associated Jira issue.
4. Assignee changes: When someone assigns a user/group to a report, post an update on the associated Jira issue.
5. Disclosure: When disclosure is requested or a report becomes public, post an update on the associated Jira issue.
6. Synchronize attachments: Synchronize attachments linked with reports and comments to the associated Jira issue.
(Optional) Select which Jira actions you'd like to post onto HackerOne in the Select Jira to HackerOne events window. You can choose from:
1. Status changed: Post an internal comment when an issue changes status.
2. Resolution changed: Post an internal comment when an issue changes resolution.
3. Closed issue status: Resolve the report when an issue is closed with the selected status.
4. Priority changed: Post an internal comment when an issue changes priority.
5. Assignee changed: Post an internal comment when an issue changes assignee.
6. Comment added: Post an internal comment when someone comments on an issue.
(Optional) Once you complete this integration, a Jira webhook will be automatically created in your Jira instance. If there is no webhook created, you can use this Webhook URL to create a webhook manually with the Issue Updated and Comment Created events.
Click Finish. Once the screen disappears, click Enable to enable the integration.

You're all set! Now that you've finished setting up the Jira integration, you can create Jira issues right from your HackerOne report.

Multiple integrations

If you have multiple HackerOne programs, you can integrate them to the same Jira instance. Follow steps 11-19 for each subsequent program you need to add an integration for.

Note: You only need to follow steps 11-20 for your other programs because the application link has already been created when integrating with your first program, and only 1 application link is needed to set up a Jira integration.

Multiple Jira instances per program

This feature is available for Enterprise programs only. If you want to integrate the same program to multiple Jira instances, you can follow all the steps above for each integration.