guilhemmarchand / TA-jira-service-desk-simple-addon

Atlasian JIRA add-on for Splunk alert actions
11 stars 8 forks source link

Splunk Cloud vetting is failing since new major release 2.0 #108

Closed guilhemmarchand closed 3 years ago

guilhemmarchand commented 3 years ago

Splunk Cloud vetting is failing since new major release 2.0:

  1. The bearer token configured from UI is stored as plain text in the backend in plain text. The same token is used for authentication with Splunk's endpoint. This is not permissible in Splunk cloud, either use Splunk's session key or use storage/passwords endpoint to save the token. File: bin/ta_service_desk_simple_addon/modalert_jira_service_desk_replay_helper.py Line Number: 231

  2. The value of the bearer token is logged in a python file, which is not permissible in the Splunk cloud. Consider removing this debug log. File: bin/ta_service_desk_simple_addon/modalert_jira_service_desk_replay_helper.py Line Number: 204