From 2047058807a0180801f23992b36db06fa81f6356 Mon Sep 17 00:00:00 2001
From: Evan Fetsko <evan.fetsko@mongodb.com>
Date: Fri, 19 Sep 2025 13:35:11 -0400
Subject: [PATCH] SERVER-111140: use authenticated Jira client for SAST report
 generation (#41583)

GitOrigin-RevId: 55aa72fc82717d3313d7b643b5d16bdb50281d03
---
 .../tasks/release_tasks.yml                        |  4 ++++
 evergreen/write_sast_report_env_file.sh            | 14 +++++++++-----
 2 files changed, 13 insertions(+), 5 deletions(-)

diff --git a/etc/evergreen_yml_components/tasks/release_tasks.yml b/etc/evergreen_yml_components/tasks/release_tasks.yml
index 5a8b08b4dcd..8af9427e924 100644
--- a/etc/evergreen_yml_components/tasks/release_tasks.yml
+++ b/etc/evergreen_yml_components/tasks/release_tasks.yml
@@ -21,6 +21,10 @@ tasks:
           binary: "${workdir}/src/evergreen/write_sast_report_env_file.sh"
           env:
             WORK_DIR: ${workdir}
+            JIRA_OAUTH_ACCESS_TOKEN: ${jira_auth_access_token}
+            JIRA_OAUTH_ACCESS_TOKEN_SECRET: ${jira_auth_access_token_secret}
+            JIRA_OAUTH_CONSUMER_KEY: ${jira_auth_consumer_key}
+            JIRA_OAUTH_KEY_CERT: ${jira_auth_key_cert}
             SAST_REPORT_COVERITY_USERNAME: ${SAST_REPORT_COVERITY_USERNAME}
             SAST_REPORT_COVERITY_PASSWORD: ${SAST_REPORT_COVERITY_PASSWORD}
             SAST_REPORT_UPLOAD_GOOGLE_CLIENT_ID: ${SAST_REPORT_UPLOAD_GOOGLE_CLIENT_ID}
diff --git a/evergreen/write_sast_report_env_file.sh b/evergreen/write_sast_report_env_file.sh
index 9f79bd59f06..29bf62de874 100755
--- a/evergreen/write_sast_report_env_file.sh
+++ b/evergreen/write_sast_report_env_file.sh
@@ -1,9 +1,13 @@
 #!/bin/env bash
 
 cat <<EOF >${WORK_DIR}/sast_report_generation_credentials.env
-COVERITY_USERNAME=${SAST_REPORT_COVERITY_USERNAME}
-COVERITY_PASSWORD=${SAST_REPORT_COVERITY_PASSWORD}
-GOOGLE_CLIENT_ID=${SAST_REPORT_UPLOAD_GOOGLE_CLIENT_ID}
-GOOGLE_CLIENT_REFRESH_TOKEN=${SAST_REPORT_UPLOAD_GOOGLE_CLIENT_REFRESH_TOKEN}
-GOOGLE_CLIENT_SECRET=${SAST_REPORT_UPLOAD_GOOGLE_CLIENT_SECRET}
+COVERITY_USERNAME="${SAST_REPORT_COVERITY_USERNAME}"
+COVERITY_PASSWORD="${SAST_REPORT_COVERITY_PASSWORD}"
+GOOGLE_CLIENT_ID="${SAST_REPORT_UPLOAD_GOOGLE_CLIENT_ID}"
+GOOGLE_CLIENT_REFRESH_TOKEN="${SAST_REPORT_UPLOAD_GOOGLE_CLIENT_REFRESH_TOKEN}"
+GOOGLE_CLIENT_SECRET="${SAST_REPORT_UPLOAD_GOOGLE_CLIENT_SECRET}"
+JIRA_OAUTH_ACCESS_TOKEN="${JIRA_OAUTH_ACCESS_TOKEN}"
+JIRA_OAUTH_ACCESS_TOKEN_SECRET="${JIRA_OAUTH_ACCESS_TOKEN_SECRET}"
+JIRA_OAUTH_CONSUMER_KEY="${JIRA_OAUTH_CONSUMER_KEY}"
+JIRA_OAUTH_KEY_CERT="${JIRA_OAUTH_KEY_CERT}"
 EOF