Security review for a change checklist template

For teams shipping a feature that touches data, access or external input. Data is classified, every new entry point gets an auth check, input is validated and output encoded, new dependencies are scanned, and a security reviewer must approve.

App: Checklist Flow for Jira
Category: Security review
Edition: Needs a paid licence; without one it shows with a Pro badge and a preview
Items: 10 items, 7 required
Suggested for: Story, Epic, Task

Items

Data and access

Item	Required
Data handled by the change is classified	Required
Authentication and authorisation checked for every new entry point	Required
Least privilege applied to service accounts and API tokens	Required

Input and output

Item	Required
All external input is validated and encoded on output	Required
File uploads are size limited and type checked	Optional
Error messages do not leak internal details	Optional

Secrets and dependencies

Item	Required
No secrets in code, logs or work items	Required
New dependencies scanned for known vulnerabilities	Required

Sign off

Item	Required
Security relevant events are logged	Optional
Security reviewer has approved	Required

Use it

In a Jira work item, open the Checklist Flow panel, then Template library in the Templates section. Find the template under its category, use Preview to see the items and Install to add it to your site's templates. From then on you can apply it to any work item, or, with a paid licence, have it added automatically by issue type.

Checklist Flow for Jira documentation
Jira checklist templates: all 49 templates