Why GitHub for JIRA App requires the READ access to the code?

[Olga Buslovich]

We recently  installed a new GitHub for jira app (https://marketplace.atlassian.com/apps/1219592/github-for-jira?hosting=cloud&tab=overview&_ga=2.79036369.413830701.1579034920-1535139634.1576535068) and have noticed during configuration that it seems to require a READ access to the code. If that is true, does anyone know why and if this is safed to do so.

[George Mihailoff · Accepted solution]

Olga, this is an excellent question. I was dealing with GitHub APIs and it seems that they want you to obtain access to the code as a developer even if you don't really need it. I would blame here less Atlassian and more GitHub, but this doesn't really change anything.

[Veera]

Thanks @George Mihailoff 

[Olga Buslovich]

Good to know - Thanks @George Mihailoff !

Will keep you posted on that as well.

[Veera · Accepted solution]

@Olga Buslovich 

You are right, GitHub for Jira app requires the READ access to the code to read the Smart Commits from your GitHub repositories and show those details in the relevant Jira issues.

[Olga Buslovich]

Thanks for your reply, @Veera !

Any ideas if there is an option that allows you to NOT use Smart Commits if you don't  need  it or don't want it. And if so, would that removes the READ access requirements?

[Veera]

Hi @Olga Buslovich 

It's possible to disable smart commits from Jira if connected using DVCS method.

Since GitHub doesn't allow DVCS method, we have to use the GitHub for Jira app which is owned and managed by GitHub.

For GitHub integration, it's not possible to disable smart commits in Jira side or Github for Jira app side. However, we can configure the app access to specific repositories.

It's worth checking with GitHub support (using below link) if there is a way to use the app without granting READ access to code. 

https://github.com/marketplace/jira-software-github

[Olga Buslovich]

Thanks for the feedback and advise, @Veera !

Have submitted the question reg the READ access requirements to GitHub support. Will let you know when I hear back from them.

Best, Olga 

[Veera]

Thanks @Olga Buslovich