Contents

Connect

Jira and Slack

Connect both in Integrations → Tickets and alerts (admins).

Jira Cloud

For findings that can't become a pull request (findings in your own code, or dependencies without a fix PR), Akesis can open a Jira issue.

  1. Under Jira, enter your site (https://<site>.atlassian.net), an Atlassian account email and API token, the project and the issue type. Akesis checks them with Jira before saving.
  2. On any finding, Create Jira issue opens one (or shows the existing one). Engineers and above can do this.
  3. Optionally, turn on automatic issues for active findings at or above a severity you choose, at most 20 per sync.

Each issue carries the severity and priority, repository, package or code location, identifiers, the reasons for the priority, the fix pull request, the scanner's description and a link back. Labels are akesis and akesis-<severity>.

The scanner stays the source of truth. When a finding is resolved in Akesis, its issue gets a comment and moves to Done. If someone closes the issue while a scanner still reports the finding, Akesis adds one comment saying so and the finding stays open. Disconnecting deletes the token and keeps existing links.

Slack

  1. In your Slack workspace, create an incoming webhook for the channel you want.
  2. Under Slack, paste the webhook URL. Akesis sends a test message before saving and never shows the URL again.
  3. Choose which alerts to send and the hour (UTC) for the daily digest.

Alerts:

  • New findings: critical, known exploited (CISA KEV), or exploit confirmed; accepted risks coming back for review.
  • Fixes: merged, merge failed or held back, opened by Akesis, reverted.
  • Safety: suspected regressions, emergency stops, and any policy change that widens autonomy, with what widened and why.
  • Failures: scanner syncs and webhook work that gave up.

Daily digest: open findings by severity, new and fixed in the last 24 hours, fix pull requests waiting for a person, the top five priorities, and accepted risks due for review in the next week.

Messages link back to Akesis; decisions are made there or on the pull request, not in Slack. Scanner text is escaped, so it can't add links, mentions or channel pings.