Connecting Jira to security tools
Now we will look at the concept of DevSecOps within the Open DevOps toolchain. DevSecOps brings security practices, such as vulnerability scanning, into the CI/CD pipeline. We can achieve DevSecOps by connecting Jira with popular external security tools such as Snyk and SonarQube.
In this recipe, we will connect the Snyk security tool to Jira.
Getting ready
This recipe entails connecting your Jira instance with your Snyk account via the Snyk Security in Jira Cloud marketplace app. In order for this recipe to work correctly, the assumption is that you already have an existing Snyk account (https://snyk.io/), you have connected your Snyk account to your source control repository (that is, Bitbucket or GitHub), and you are actively scanning the source control.
You must also be a Jira product admin to execute this recipe.
What is Snyk?
Snyk is an application security scanning tool that specializes in identifying and fixing vulnerabilities...