Jira Data Center Integration

Push Cobalt findings to your Jira Data Center.

:::info Learn how to integrate Jira Data Center with Cobalt. The availability of this feature depends on your PtaaS tier.

If your organization uses Jira Cloud, see Jira Cloud Integration.

:::

Configuration

Required permissions:

• Cobalt: Organization Owner or Member
• Jira: Jira admin

Step 1: Connect the Jira Plugin

1. In Cobalt, go to Integrations > Jira.
2. Under What type of Jira setup are you using?, select Jira Data Center.

3. Follow the instructions in the UI to install and connect the Cobalt for Jira DC plugin.
4. Return to the Cobalt app, and check the integration status. You should see your Jira instance on the Jira Integration page..

Step 2: Configure the Integration for a Pentest

1. In Cobalt, go to Integrations > Jira > Configuration. Here, you can see pentests for which you can configure the integration.
2. For the desired pentest, select the gear icon.⚙️

3. In the overlay that appears, configure integration parameters:

• Jira Project
• Issue Type
• Labels to add to Jira issues

• State Mapping (Jira to Cobalt): Map Jira issue statuses to Cobalt finding states.

4. Select Save.

How the Integration Works

Here’s what to expect once you’ve enabled the integration for a pentest:

• The Auto-Push option is enabled for a pentest by default. When a new finding in the Pending Fix state is reported, a new issue is automatically created in Jira. Learn more about how auto-push works.
• Pentest Team Members can push findings manually—if they’re not already synchronized. Learn how to push findings manually.
• Jira issue statuses are synchronized with Cobalt finding states according to your mapping settings.

You can manage Jira connections for specific pentests:

• View the connection status in Integrations > Jira > Configuration. Here, you can see the last synchronization time.
• Adjust the configuration for specific pentests if needed.

Learn how finding parameters are mapped between Cobalt and Jira.

Mappings of finding fields to Jira issue fields (Cobalt → Jira DC):

• Finding Title → Jira ticket title
• Pentest ID → Description - Cobalt URL
• Description → Description - Overview
• Affected URL(s) → Description - Browser URL
• Proof of Concept → Description - Steps to Reproduce
• Suggested Fix → Description - Suggested Fix
• Attachments → Attachments

The following parameters are not exported:

• Vulnerability Type
• Severity
• Prerequisites
• HTTP Request
• Comments

:::info Note

You can synchronize findings’severity levelswith Jira using theCobalt Severityfield.Learn more.

:::

Attachments Support

You can add attachments to Cobalt findings. To ensure that attachments are created properly on the Jira Data Center, verify the following:

• On the machine where Jira Data Center is installed, locate your $JIRA_HOMEdirectory. Follow the Atlassian documentation on how to locate the Jira application home directory.
• The user must have permissions to:
  • Create a $JIRA_HOME/import/cobaltdirectory.
  • Read and write files within the $JIRA_HOME/import/cobaltdirectory.

Delete the Integration

You can delete the integration with Jira.

1. In Cobalt, navigate to Integrations > Jira, and then select Delete.

2. In the Jira admin panel, uninstall the Jira plugin.

Here’s what to expect once you’ve deleted the connection:

• Data synchronization between Cobalt and Jira stops.
• All Jira configurations for specific pentests are deleted. If you decide to reestablish the connection, you need to reconfigure the integration for each pentest.