Secrets Finder is a Forge app for Jira Cloud that scans issue content for likely exposed secrets.
- Jira issue panel for issue-specific findings
- Jira admin page for settings, summary counts, and manual batch scans
- Hosted storage using
@forge/kvs - Deterministic scanning for summary, description, comments, and configured custom fields
- Screenshot scanning scaffolding with OCR caching and provider stubs for later implementation
src/frontend/issue-panel.jsx: Jira issue panel UIsrc/frontend/admin-page.jsx: Jira admin UIsrc/resolvers/index.js: Forge resolver definitions and scheduled handler exportsrc/services/: scanner, Jira API helpers, storage, settings, OCR, and suppression support
Run Forge commands from the app root:
forge lint
forge deploy --non-interactive --e development
forge install --non-interactive --site <your-site>.atlassian.net --product jira --environment development- Screenshot scanning is scaffolded as an optional feature, but the OCR provider itself is still stubbed.
- The current implementation stores hashes, fingerprints, masked previews, and snippets rather than raw secret values.
- If you add scopes or other manifest permissions later, redeploy and then reinstall the app so Jira sees the permission changes.