Jira Token

Description

General

• Documentation: https://developer.atlassian.com/cloud/jira/platform/rest/v3/intro/
• Summary: Jira is a ticket management platform. This detector focuses on detecting API personal tokens.

Revoke the secret

The secret can be revoked by revoking the token.

Details for Jira Token

• Family: credentials

• Category: collaboration_tool

• Company: Atlassian

• High recall: False

• Validity check available: True

• Analyzer available: True

• Revoker available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: True

• Occurrences found for one million commits: 0.49

• Prefixed: False

Secret Analyzer

Analysis Method

• Provider allows scopes enumeration: False
• Total network call count: 3
• Total call count may vary: False

HTTP Calls

Requests are designed to capture metadata and not to function effectively.

• GET: /rest/api/3/mypermissions
• GET: /rest/api/3/myself
• GET: /rest/api/3/permissions

Other Calls

Non-HTTP queries or HTTP calls made through a third-party app (e.g., Python package). No other calls for this analyzer.