
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
bfjira (branch from Jira) is a command-line utility that simplifies the process of creating Git branches based on JIRA ticket information. It ensures that branch names are consistent and informative by incorporating the issue type and summary from the JIRA ticket.
The recommended way to install bfjira is via pip from PyPI:
pip install bfjira
Make sure you have pip installed and are using a virtual environment if necessary.
To use bfjira, you must have the following environment variables set:
JIRA_SERVER: Your JIRA server URL.JIRA_EMAIL: The email address associated with your JIRA account.JIRA_API_TOKEN: Your JIRA API token.Instructions for creating a Jira API token can be found here
Optionally, you can set the JIRA_TICKET_PREFIX environment variable to use a default prefix other than "SRE" for ticket IDs that are entered without a prefix.
Show version:
bfjira --version
Show help message:
bfjira --help
Create a branch for a JIRA ticket:
bfjira --ticket SRE-1234
If you only have the ticket number, bfjira will use the default prefix ("SRE" or whatever is set in JIRA_TICKET_PREFIX):
bfjira -t 1234
Set a custom issue type for the branch:
bfjira -t 1234 --issue-type hotfix
Create a branch without setting the upstream:
bfjira -t 1234 --no-upstream
Increase output verbosity (useful for debugging):
bfjira -t 1234 --verbose
Optionally prevent transitioning the ticket to 'In Progress':
By default, the script transitions the specified JIRA ticket to 'In Progress'. If you wish to create a branch for the ticket without changing its status, use the --no-progress flag. This is useful when you need to perform operations on the ticket without indicating that work has started.
bfjira -t 1234 --no-progress
Handle uncommitted changes:
If bfjira detects uncommitted changes (including untracked files) in your repository, it will prompt you before proceeding. You can choose to have the script automatically stash these changes. The stash will be automatically popped after the branch is successfully created and the JIRA ticket is transitioned. If you choose not to stash, the script will exit.
bfjira follows Semantic Versioning (SemVer) for its releases:
The versioning is automated through GitHub Actions, which:
JIRA Authentication Errors
JIRA_API_TOKEN is valid and not expiredJIRA_EMAIL matches the account associated with the API tokenBranch Creation Issues
Version Mismatches
pip install --upgrade bfjira
If you encounter issues not covered here:
--verbose flag for more detailed error messagesbfjira uses Poetry for dependency management and packaging. To set up the development environment:
Install Poetry:
curl -sSL https://install.python-poetry.org | python3 -
Clone the repository:
git clone https://github.com/nwhobart/bfjira.git
cd bfjira
Install dependencies:
poetry install
Activate the virtual environment:
poetry shell
Run the test suite with:
poetry run pytest
Contributions to bfjira are welcome! Please read the contributing guidelines before submitting pull requests.
bfjira is released under the GNU General Public License. See the LICENSE file for more details.
FAQs
Create Git branches from Jira tickets
We found that bfjira demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.