You can integrate with ClickUp to sync information between your HackerOne report and your ClickUp task.
To integrate with ClickUp:
Go to Program Settings > Program > Integrations.
Click the Connect with ClickUp link.
Click the Set up new integration button.
Enter the Name and Description for your new integration and click Next.
Navigate to the ClickUp API settings of ClickUp by going to Settings > ClickUp API and click Create an App
Enter the following information on the Create an App window and click Create App.
FieldsDetailsApplication NameHackerOneRedirect URL(s)
hackerone.integration-authentication.com
You will be provided with a Client ID and a Client Secret.
Navigate back to HackerOne and click Add a new account in the ClickUp authentication window.
Enter your ClickUp Client ID and the Client Secret from step 7 in the Create a new authentication window and click Create.
A window with all your workspaces will pop up. Select the workspace with the list you want to escalate the reports to and click Connect Workspace.
Click Next to finalize the setup between HackerOne and your ClickUp instance.
Configure which ClickUp Team, Space, Folder, and List you'd like to escalate HackerOne reports to in the ClickUp Team, Space, Folder, and List window and click Next.
Note: only lists that belong to a folder are currently supported.
Select the HackerOne fields you want to map to the corresponding ClickUp fields. Alternatively, enter any text using integration variables. If you have custom fields configured in ClickUp they also can be mapped to HackerOne fields. Finally, you can configure the labels that are being applied to every new task. Click Next.
Note: only Text and Textarea custom field types are supported.
Note: Alternatively, you can manually set the mapping to a single field or combination of fields from the integration variables. For example: {{triage_summary}} \\ Link: {{report_link}} \\ Date: {{submission_date}} \\ Reporter: {{reporter_name}} \\ Weakness: {{weakness}} Would create a combination of the triage summary, a link to the report the submission date, the reporter name, and the weakness of their report and map that to a single field.
(Optional) Select the ClickUp Priorities you want to map to the corresponding HackerOne Severities. This enables the right priority to be set when escalating a HackerOne report to ClickUp.
(Optional) Select which actions in HackerOne you'd like to post to ClickUp in the Select HackerOne to ClickUp events window. You can choose from:
Option | Detail |
Comment added | When someone comments on a report, post an update on the associated ClickUp task. |
State changed | When someone changes the state of a report, post an update on the associated ClickUp task. |
Reward changed | When someone awards or suggests a bounty and/or bonus, post an update on the associated ClickUp task. |
Assignee changed | When someone assigns a user/group to a report, post an update on the associated ClickUp task. |
Disclosure | When disclosure is requested or a report becomes public, post an update on the associated ClickUp task. |
Synchronize attachments | Synchronize attachments linked with reports and comments to the associated ClickUp task. |
(Optional) Select which ClickUp actions you'd like to post onto HackerOne in the Select ClickUp to HackerOne events window. You can choose from:
Option | Detail |
Status changed | Post an internal comment when a task changes status. |
Closed task status | Resolve the report when a task is closed with the selected status. |
Comment added | Post an internal comment when someone comments on a task. |
Assignee changed | Post an internal comment when a task changes assignee. |
Priority changed | Post an internal comment when a task changes priority. |
(Optional) Once you complete this integration, a ClickUp webhook will be automatically created in your ClickUp instance. If there is no webhook created, you can use this Webhook URL to create a webhook manually with the taskCommentPosted, taskPriorityUpdated, taskStatusUpdated, and TaskAssigneeUpdated events.
Click Finish. Once the screen disappears, click Enable to enable the integration.
You're all set! Now that you've finished setting up the ClickUp integration, you can create ClickUp tasks right from your HackerOne report.
Multiple Integrations
If you have multiple HackerOne programs, you can integrate them to the same ClickUp instance. Steps 5-7 can be omitted for each subsequent program you need to add an integration for.
Note: You can omit steps 5-7 for your other programs because an App has already been created when integrating with your first program, and only 1 App is needed to set up a ClickUp integration.
Multiple ClickUp Instances per Program
This feature is available for Enterprise programs only. If you want to integrate the same program with multiple ClickUp instances, you can follow all the steps above for each integration.