SNOW-1689931: Snowflake JDBC Driver does not allow using the SPCS /snowflake/session/token due to its permissions being globally read-write. #4307

	name: Jira creation

	on:
	issues:
	types: [opened]
	issue_comment:
	types: [created]

	jobs:
	create-issue:
	runs-on: ubuntu-latest
	permissions:
	issues: write
	if: ((github.event_name == 'issue_comment' && github.event.comment.body == 'recreate jira' && github.event.comment.user.login == 'sfc-gh-mkeller') \|\| (github.event_name == 'issues' && github.event.pull_request.user.login != 'whitesource-for-github-com[bot]'))
	steps:
	- name: Checkout
	uses: actions/checkout@v4
	with:
	repository: snowflakedb/gh-actions
	ref: jira_v1
	token: ${{ secrets.SNOWFLAKE_GITHUB_TOKEN }} # stored in GitHub secrets
	path: .

	- name: Login
	uses: atlassian/[email protected]
	env:
	JIRA_BASE_URL: ${{ secrets.JIRA_BASE_URL }}
	JIRA_USER_EMAIL: ${{ secrets.JIRA_USER_EMAIL }}
	JIRA_API_TOKEN: ${{ secrets.JIRA_API_TOKEN }}

	- name: Create JIRA Ticket
	id: create
	uses: atlassian/[email protected]
	with:
	project: SNOW
	issuetype: Bug
	summary: '${{ github.event.issue.title }}'
	description: \|
	${{ github.event.issue.body }} \\ \\ _Created from GitHub Action_ for ${{ github.event.issue.html_url }}
	fields: '{ "customfield_11401": {"id": "14723"}, "assignee": {"id": "712020:3c0352b5-63f7-4e26-9afe-38f6f9f0f4c5"}, "components":[{"id":"19281"}] }'

	- name: Update GitHub Issue
	uses: ./jira/gajira-issue-update
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	with:
	issue_number: "{{ event.issue.id }}"
	owner: "{{ event.repository.owner.login }}"
	name: "{{ event.repository.name }}"
	jira: "${{ steps.create.outputs.issue }}"

Provide feedback