snyk-jira-ingest

name	snyk-jira-ingest
disable-model-invocation	true
description	Pull REAL Snyk SAST findings from EPAM Jira (Data Center) via the search-export API using a Personal Access Token, and emit them as a stage-output.json artifact for a downstream triage stage. Use when you want the actual Jira-tracked Snyk findings (the same set a human gets by clicking Export on the security filter) rather than a synthetic fixture.

Snyk → Jira Ingest

Pull the real Snyk SAST findings tracked in EPAM Jira for the downstream triage stage. All the work — fetch, filter to this repo, cap, and writing a schema-valid stage-output.json — is done by the committed script fetch.sh; you only run it and confirm the result. (Config and behaviour are documented in that script.)

Procedure

1. Run the script:

   bash .claude/skills/snyk-jira-ingest/fetch.sh
   

2. Read stage-output.json to confirm it exists. The script already wrote a valid envelope — do not overwrite it. Then finish.

3. Only if the script is denied or errors before that file exists: write a failed result naming what went wrong. Never fabricate findings or a synthetic export.