David Eads, Atlassian, presents how to clean and tune your Jira and Confluence instances and Himanshu Chhetri, Addteq, discusses how to implement DevSecOps within your software organization's delivery pipeline.

1. Welcome
Hosted by
New York City Atlassian Community Group

2. Presentations
Implementing DevSecOps within the Atlassian Ecosystem - Himanshu Chhetri, Addteq
Poor software development security hygiene can lead to security and data breaches within your applications.
Himanshu, Enterprise Architect, will demonstrate how DevSecOps can inject security into your organization's
software delivery process. He will provide strategies for automating application security scans as part of the CI/CD
pipeline and JIRA integrations for tracking actionable findings.
Jira and Confluence Cleaning and Tuning - Daniel Eads, Atlassian
With our primary focus on creating/resolving Jira issues and building expansive knowledge bases in Confluence,
we sometimes push the maintenance of our Atlassian environments to the side. Overtime, these once
fast-running and efficient platforms, start to get a bit sluggish and workflows/processes become confusing. Daniel,
Atlassian, Community Support Engineer, will present how to clean, tune, and keep your Jira and Confluence
instances running in top shape - whether it's cloud or server.

4. Addteq is a global professional services firm with more than 13 years
of experience in delivering software solutions with clients from mid-
size to Enterprise level clients.
One of the top Atlassian Solution Partners in the US & APAC regions.
LOCATIONS
Headquarters, Princeton, NJ with additional offices in Los Angeles,
CA, India and Singapore
ABOUT US

5. “DevOps and Atlassian Tools Implementation Architect. Nearly a
decade of experience spanning across pre-sales, implementation
and post implementation support.”
ABOUT ME
Himanshu Chhetri
Enterprise Architect @ Addteq

6. Agenda
COST OF REMEDIATION
DEVSECOPS
CUSTOMER CASE STUDY
TIMELINE
1
2
3
4

7. Cost of remediating a security vulnerability
weeks
Development Commit SQA / Test Production
months
minutes
Developers have
no context
switching, receive
immediate
feedback, can be
fix vulnerabilities
early in the SDLC.
Security team has
less
vulnerabilities to
assess, manage,
and triage within
the apps deployed
within production.

9. Application Security Scans
Each app sec product must integrate with multiple DevOps tools

10. Customer
Case Study
EXPENSIVE
LIMITED REPORTING
MANUAL SCANS
MISSING SCANS

11. SOLUTION
ARCHITECTURE

12. CUSTOMER
ARCHITECTURE

13. Customer
Case Study
EXPENSIVE
LIMITED REPORTING
MANUAL SCANS
MISSING SCANS

14. Customer
Case Study
COST
OPTIMIZED
JIRA BASED
REPORTING
AUTOMATED SCANS
100% SCAN
COVERAGE

18. Consolidating application security tools with Gitlab

19. Scan
s
Integrate with CI/CD
pipeline
Automat
e
Eliminate manual
appsec triage
Consolidat
e
Minimize overhead of
managing multiple
tools
Focu
s
Minimize context
switch
Takeaways

20. Q/A

23. DANIEL EADS | COMMUNITY SUPPORT ENGINEER
Cleanup Guide
Jira and Confluence edition

24. A LITTLE TIME AND
A LITTLE EFFORT NOW
SAVES TIME & EFFORT LATER

25. Get permission
before launch

26. Inactive
Users
Apps Archives Attachments
Cross-product items

27. Server & Data Center
SQL
Inactive users by date,
Retrieved from the database
Monitor & script

28. Server & Data Center
SQL
Cross-product license
visibility for
Crowd Data Center

29. Server & Data Center
SQL
List users based on criteria
Export reports
Take action on a schedule

30. Cloud
Atlassian Access
Cross-product license
visibility for
Cloud Products
Apps
List users based on criteria
Export reports
Take action on a schedule

31. Inactive
Users
Apps Archives Attachments
Cross-product items

32. App Directory Page
A list of apps in your instance,
who uses them,
and what they do.

33. Upgrade Log
Changelog of your app upgrades
What apps, what versions
Release notes for stakeholders

34. Jira
Workflows
Confluence
Macros
App usage
General Configuration -> Macro Usage
Admin Toolbox for Jira

35. Test changes in a
staging
environment
before going live
DISCLAIMER

36. Inactive
Users
Apps Archives Attachments
Cross-product items

37. JIRA DATA CENTER & CLOUD PREMIUM

38. JIRA DATA CENTER
Issue Archive
Archive individual issues
Scriptable
Archive issues as part of a
bulk change, or use the API
Performance
Removes the issues from index
as well as boards

39. Jira Server?
More
strategies
online

40. CONFLUENCE ANALYTICS

41. CONFLUENCE ARCHIVING

42. CONFLUENCE ARCHIVING

43. CONFLUENCE ARCHIVING

44. More
options on
Marketplace

45. Inactive
Users
Apps Archives Attachments
Cross-product items

46. CHECKING ATTACHMENTS
Screenshot media placeholder
Simply drop your screenshot
on to this media placeholder
NCDU
For everything not-Windows
WinDirStat
For Windows
Cloud
Cloud offers 250GB per product
Premium provides unlimited

47. Shoot for the moon
Land in the stars

48. Jira Fields
Custom Fields
Contexts
Resolutions
Checkers
Screenshot media placeho
Simply drop your screensh
on to this media placehold
Shape usage
Please only use circles, rectangles, and
rounded rectangles to call attention to a
particular part of a screenshot, for the
sake of consistency.

49. Jira Fields
Custom Fields
Contexts
Resolutions
Checkers
Shape usage
Please only use circles, rectangles, and
rounded rectangles to call attention to a
particular part of a screenshot, for the
sake of consistency.

50. Jira Fields
Custom Fields
Contexts
Resolutions
Checkers
Shape usage
Please only use circles, rectangles, and
rounded rectangles to call attention to a
particular part of a screenshot, for the
sake of consistency.

51. Jira Fields
Custom Fields
Contexts
Resolutions
Checkers
Shape usage
Please only use circles, rectangles, and
rounded rectangles to call attention to a
particular part of a screenshot, for the
sake of consistency.

52. Empty Trash
For when it’s really time to
get rid of it (and not archive)
Purge Synchrony
If your site is really really busy
Confluence Pruning

53. This isn’t the end.
I’ll see you on Community.
DANIEL EADS

54. Questions, book reccies