Skip to content

JiraCloudSetup

Jump to bottom
Chris Bacco edited this page May 28, 2020 · 2 revisions

Installation Instructions

Create an API token from your Atlassian account:

  1. Log in to https://id.atlassian.com/manage/api-tokens.
  2. Click Create API token.
  3. From the dialog that appears, enter a memorable and concise Label for your token and click Create.
  4. Click Copy to clipboard, then paste the token to your script, or elsewhere to save:

Create a Project - LeadAccount ID from your Atlassian account:

  1. The easiest way to find your LeadAccountID is by simply selecting the User Icon in the bottom left hand corner and then selecting ‘profile’
  2. This will take you to your profile page, your LeadAccount ID can be found in the URL String.

Create an Access & Secret key for your Tenable.io Account

  1. Settings>My Account>API Keys
  2. Generate Keys and copy to clipboard, store in secure location.

Create a Python Virtual Environment & install YAML using the pip command

  1. Create a virtual environment using command: python3 -m venv
  2. Activate your virtual environment using command: source /bin/activate
  3. Install YAML via the pip command: pip3 install pyyaml
  4. Clone the git repo: git clone https://github.com/tenable/integration-jira-cloud.git

Update your YAML file & install the integration

In order to configure the integration, you need to provide the script a configuration file in the YAML format. The below example config file details the items required for the script to run. Your username is your Atlassian ID, and the address is the site URL (i.e.: https://test.atlassian.net/). A simple example looks like the following:

Install the Integration with the following commands:

  1. Install the integration: pip3 install ~/path to cloned github repo/integration-jira-cloud
  2. Upload the config file from step #5 above: tenable-jira ~/path to file/config.yaml

View Vulnerability Data in Jira

  1. Wait for vulnerability data to update, this may take a few moments. Even if it looks like it’s not doing anything on the command line.
  2. Upon completion check Jira and you should see a default VM project created and associated Vuln Data. From here, use the power of Jira to create remediation workflows, assign tasks and create dashboards and Kanban boards.
Clone this wiki locally