Skip to main content
  • Semgrep Cloud Platform
  • Team & Enterprise Tier

Create Jira tickets


This feature is in a closed beta. To request access:

  1. Fill out the following form: Request access to the Semgrep Jira integration closed beta.
  2. Contact your Technical Account Manager or your Account Executive and let them know you'd like to try the Jira integration out.

The Semgrep Jira integration allows you to create Jira tickets based on your Semgrep Code or Supply Chain findings.

Enable your Jira integration

  • You must have a Jira Cloud plan. Jira Data Center (self-managed, or on-prem) is not supported.
  • Your Jira user must be able to create a Jira API key with admin level privileges.

To integrate Jira, follow these steps:

  1. In Semgrep Cloud Platform, go to Settings > Integrations.
  2. On the Integrations page, click Add Integration (or Setup First Integration if this is your first integration), and then select Ticketing > Jira.
  3. Follow the on-screen instructions to add your Jira API key.

Configure your default project and ticket type

Use the drop-down lists to select the default project and ticket type. These settings can be changed later from the integrations page.

Jira configuration modal

Figure A sample Jira integration

Create tickets



Creating tickets for many findings at once may take some time. Tickets that take longer than 10 seconds to create will be shown in the UI once the page is refreshed.

To create tickets for one or more Code findings, use the triage button from the Code findings page or from an individual finding's details page. Findings can be individually selected, or you can create tickets for all findings for a given rule.

Once a ticket has been created, a link will be present on the right side of the findings page and along the top of an individual finding's details page.

Create Jira ticket - Code Figure Code triage flow

Jira ticket created - Code Figure Code ticket created

Supply Chain


Tickets can only be created for Supply Chain findings with reachable usages. They cannot be created for Always reachable or Unreachable findings.

The Supply Chain triage flow creates tickets for all usages of a given vulnerability. Usages can not be selected individually.

Create Jira ticket - Supply Chain Figure Supply Chain triage flow

Jira ticket created - Supply Chain Figure Supply Chain ticket created

Remove your Jira integration

On the Integrations page, find Jira, click Edit Configuration and the Delete

  • This does not delete any tickets created by Semgrep.
  • This removes the link between Jira tickets and Semgrep findings, even if the integration is re-added in the future.

Not finding what you need in this doc? Ask questions in our Community Slack group, or see Support for other ways to get help.