Forge, a short path out, and a way to tell us.

How the app runs

ChatHerald is an Atlassian Forge app. Its code runs on Atlassian’s Forge infrastructure, not on servers we operate. Configuration, webhook URLs, and the delivery log are kept in Forge storage for each installation. Webhook URLs are stored as secrets, and the admin screen shows a masked URL.

Data residency is handled by Atlassian: Forge storage stays in the same location as the host Jira or Confluence site, and Atlassian encrypts it at rest. When the app is uninstalled, Atlassian deletes its Forge storage under Atlassian’s retention policy. See the privacy policy.

The manifest allows one outbound host: https://chat.googleapis.com. Messages can include issue summaries, a short comment excerpt, and page titles, so that egress is declared as carrying end-user data. The app does not request permission to edit Jira or Confluence.

Runs on Atlassian

Runs on Atlassian status: not eligible.

Atlassian’s Runs on Atlassian badge is for apps that use only Atlassian-hosted compute and storage and do not send data outside Atlassian, except for analytics. ChatHerald’s purpose is to post message content to a Google Chat webhook, which is outside Atlassian, so it does not qualify. Its compute and storage are still Atlassian-hosted.

Responsible disclosure

Email [email protected] with the subject “ChatHerald security”. Please describe the issue, the version or date you saw it, and how to reproduce it. If it affects a site you administer, include that site hostname. Do not include webhook tokens, issue bodies, or data from a site you do not administer.

Please contact us before you publish details, so we can fix the issue. The mailbox is monitored on New Zealand business days (weekdays, excluding New Zealand public holidays). There is no bug-bounty programme.

This page is not an invitation to test a customer site you do not control.