GitHub Recommendations

[Wood_ Jeremy]

Hello,

Our company is looking to integrate our GitHub repositories and are looking for an addon to accomplish this. We started with the free app but had several security concerns with the app listed below. So we are asking the community if anyone knows of an app they would recommend that addresses these concerns. 

1. Once enabled the default app becomes available on all projects within the company. We can limit the app by controlling what projects contain the custom field connected to the app. But ideally we would rather be able to select specific projects to have the addon. 
2. There is no option to disable smart commits, which means someone without access to a Jira project could potentially transition issues via commit messages in GitHub.
3. : Any user can create a branch from the Jira Development panel, even if they don’t have access to the corresponding GitHub repository or don’t exist in GitHub.
4. We want to link only certain repositories to specific Jira projects. The free Atlassian plugin links all repositories to all projects. Meaning anyone could get access to a repository they shouldn't be involved in.

Any recommendations/advice are appreciated. 

[Ankita Mehta-OpsHub_ Inc]

Hi @Wood_ Jeremy

The native GitHub–Jira connector is great for quick setups but limited when it comes to governance and access control. A few things to think about before you pick an alternative:

• Repository-level control: Look for a solution that lets you explicitly choose which GitHub repos link to which Jira projects, not a blanket connection across the instance.
• Smart commit restrictions: Ensure you can disable or limit smart commits so only authorized users can transition issues.
• User mapping and permissions: The tool should validate users across both systems to prevent unauthorized commits or issue updates.
• Auditability: Check that all commits, pull requests, and issue transitions are fully traceable, with visibility into who did what and when.

In your case, you may want to explore OpsHub Integration Manager (OIM) -a no-code, plugin-free, bi-directional sync platform. It runs outside both systems, supports granular project-repo mapping, and preserves full context (attachments, comments, commit history) without relying on scripts. As an Atlassian Solution Partner, OpsHub helps teams integrate GitHub and Jira securely while maintaining data integrity and compliance. You might want to see the Atlassian Marketplace listing on GitHub Jira integration .

Hope it helps!:)

[Aron Gombas _Midori_]

@Wood_ Jeremy I am not very familiar with all the options out there, but the "most mature" app to integrate Git repos (including GitHub ones) to Jira is Git Integration.

I would definitely check this first, if it is a better fit than the free one.