The Ovyka Security Filter for Jira plugin is provided as a JAR file.
To install the plugin, go to JIRA Add-ons administration, and select the Manage Add-ons page. On the page, click the Upload add-on button, select the Ovyka Security Filter for Jira JAR, and click OK.
Once the add-on is installed, there is no need to configure it. Sensitive data (currently PAN numbers) will be automatically filtered out from inputs in JIRA :
- manual inputs (issue subject, description, comments, and basically in any area where a user/admin can enter text);
- attached files (only XML or TXT, as other file types may create filtering issues - we may identify PAN numbers in images data, for example, which would break the image and maybe also create a server error).
- incoming mails (requires configuration - see below).
Replacing a mail handler with its secure counterpart
If you JIRA instance is configured to receive an process incoming mails, you may want to filter also mail contents. Otherwise, mail content containing sensitive data could be added to issues by a mail handler, without any filtering.
To filter also incoming mails, you just need to go to you JIRA Incoming mail adminsitration page, and select the Ovyka Security Filter for JIRA handler matching the one you were previously using. For example, in the screenshot below, the selected mail handler is :
- Create a new issue or add a comment to an existing issue
To secure incoming, mails, we just have to replace it by the matching mail handler, provided by the add-on :
- [Ovyka Security Filter for Jira] Create a new issue or add a comment to an existing issue
Email this issue (JETI)
If you are using the Email this Issue add-on (JETI) to process incoming mails into your JIRA instance, then our add-on can still secure your incoming emails. You'll notice the last mail handler in the list on the screenshot above, which is the replacement for Email This Issue Mail Handler :
- [Ovyka Security Filter for Jira] Email This Issue Mail Handler
Just select it, and your JETI add-on will continue to process incoming mail, but with sensitive data filtered out.