How can I get the repository name from the alerts generated by Dependabot?

[ludwin_morales]

I'm using the Security feature (Security Containers), connecting Jira to Dependabot alerts, and automatically creating tickets when Dependabot detects a new vulnerability. The problem is that I can't get the repository name to use as a title or tag on my Jira ticket.

The variables I can use are the following and none of them give me the name of the github repository:

• Vulnerability - additional info content
• Vulnerability - additional info URL
• Vulnerability - description
• Vulnerability - display name
• Vulnerability - identifiers
• Vulnerability - introduced date
• Vulnerability - last update date
• Vulnerability - severity
• Vulnerability - status
• Vulnerability - type
• Vulnerability - URL

[ludwin_morales]

I'm also trying to use the "Split", but when I add it to my automation, it doesn't work, and I get an error when trying to create the ticket:

vulnerability.url= https://github.com/Zubale/scheduled-tasks/security/dependabot/1

{{vulnerability.url.split("/")[4]}}

So I'm trying to get the repository name: scheduled-tasks

Automation: 

 

Error:

[Marc - Devoteam]

Hi @ludwin_morales 

Then you need to create a variable.

The variable should result in the name of the repository from the url

Do a log action to check the variable output and use the variable in the issue creation, place the variable in the description field.

clause for in variable creation: 

{{vulnerability.url.substringAfter("Zuable/").substringBefore("/")}}

[Marc - Devoteam]

Hi @ludwin_morales 

Welcome to the community.

How are the Jira issues created, I suspect via the API.

These variables, are they from Dependabot?

[ludwin_morales]

Hi @Marc - Devoteam 

I am using the Security feature and the "Connect Security Containers" option.

This causes the Dependabot vulnerability alerts to appear in this section. Then, I have an automation that creates the ticket in the Jira project. This is where I try to get the repository name, which I haven't been able to achieve.

I can't find a variable that gives me the name of the Dependabot repository.

[Marc - Devoteam]

Hi @ludwin_morales 

Based on the documentation, there is no such an option.

See, jira-smart-values-security 

You can raise a feature request via https://jira.atlassian.com/secure/Dashboard.jspa