
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
@jupiterone/graph-jira
Advanced tools
A JupiterOne managed integration for https://www.atlassian.com/software/jira.
Learn about the data ingested, benefits of this integration, and how to use it with JupiterOne in the integration documentation. The askJ1 community also has documentation on Jira integrations here: Jira integration with JupiterOne
Install Node.js using the installer or a version manager such as nvm or fnm. Be sure to use Node version 18.x.
Install dependencies with yarn install.
Register an account in the system this integration targets for ingestion and obtain API credentials.
cp .env.example .env and add necessary values for runtime configuration.
When an integration executes, it needs API credentials and any other
configuration parameters necessary for fetching data from the provider. The
names of these parameters are defined in src/instanceConfigFields.ts. When
executed in a development environment, values for these parameters are read
from Node's process.env, loaded from .env. That file has been added to
.gitignore to avoid committing credentials.
yarn start to run integration and collect datayarn graph to show a visualization of the collected datayarn j1-integration -h for additional commandsStart by taking a look at the source code. The integration is basically a set of functions called steps, each of which ingests a collection of resources and relationships. The goal is to limit each step to as few resource types as possible so that should the ingestion of one type of data fail, it does not necessarily prevent the ingestion of other, unrelated data. That should be enough information to allow you to get started coding!
See the SDK development documentation for a deep dive into the mechanics of how integrations work.
See docs/development.md for any additional details about developing this integration.
This project is versioned using auto.
Versioning and publishing to NPM are now handled via adding GitHub labels to pull requests. The following labels should be used for this process:
For each pull request, the degree of change should be registered by applying the appropriate label of patch, minor, or major. This allows the repository to keep track of the highest degree of change since the last release. When ready to publish to NPM, the PR should have both its appropriate patch, minor, or major label applied as well as a release label. The release label will denote to the system that we need to publish to NPM and will correctly version based on the highest degree of change since the last release, package the project, and publish it to NPM.
The history of this integration's development can be viewed at CHANGELOG.md.
FAQs
A JupiterOne managed integration for https://www.atlassian.com/software/jira.
The npm package @jupiterone/graph-jira receives a total of 113 weekly downloads. As such, @jupiterone/graph-jira popularity was classified as not popular.
We found that @jupiterone/graph-jira demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.