Data security when integration Github and Atlassian

[Manu V Nair]

Our company data is sensitive and cannot be used in undisclosed domains. What do people usually do for integrating repos and Jira?

[Staffan Redelius]

We are using the Plugin from GitKraken:

Git Integration for Jira (Azure DevOps, GitHub, GitLab) | Atlassian Marketplace

I am working for a customer handling a lot of personal information so they are very strict on what to expose or not. But the sensitive customer data is not stored in GitHub. 

So when you refer to "company data" do you mean build information, repo names etc. or the actual data your company process using the applications stored in the repos in Github?

Are you using GitHub cloud or are you storing your source code on-prem?

[Manu V Nair]

We are using Github cloud. The data is very sensitive company IP as well as customer IP. A vague statement like the one Atlassian has put on the website does not help.

[Dilip]

@Manu V Nair 

If the notice the app itself is provided by Atlassian, so no need to worry in this scenario. but if you wish to switch to some other third party party that data will be shared with the vendor only if you provide your consent at the time of installing the app.

[Manu V Nair]

I would want to know exactly who the vendors are. The statement is too vague on the website. I cannot risk company data on that.

[Yogesh Mude]

@Manu V Nair  Welcome to the community!

As i can see the app itself is provided by the Atlassian vendor so in this case i dont see any issues, still you can contact with the Vendor directly to know more about what kind of data will share and the other details if you have any data related questions.

[Manu V Nair]

Probably not in practise, but I am afraid our internal procedures require a clear iron-bound statement.