Work management export

Before choosing work management

Use this page when the customer tracks remediation in a planning tool instead of a developer issue tracker. Work management exports create or update tasks, cards, issues or work items while WebRiskOps keeps the source finding, evidence and duplicate state. Start from `/reports/{report}/ticket-exports` after the report finding or generated fix task is ready for handoff. Do not approve the export until the selected provider target, required field mapping and preview are clear.

Export to a work management tool

Follow the path `Ticket export source → Work manager target → Provider field mapping → Duplicate check → External task or fallback`.

1. Open /reports/{report}/ticket-exports and select the report issue or generated fix task that belongs in a planning tool. Result: source_type, source_id, severity, affected URL and evidence-safe links are visible before a task is created.
2. Choose an active trello_cloud, linear_cloud, azure_devops_services, azure_devops_server, youtrack_cloud, youtrack_server, asana_cloud or clickup_cloud target. Result: provider_key identifies the work manager that will receive the task.
3. Confirm the target belongs to the same account and project as the report. Result: work is not sent to another customer workspace or board.
4. Map the provider fields required by the selected tool, such as board_id, list_id, team_id or work_item_type. Result: the destination can accept the task without provider validation failures.
5. Review title, affected URL, evidence-safe links, acceptance criteria and assignees. Result: the task gives the external team enough context without raw private artifacts or secrets.
6. Check external_issue_id and TICKET_EXPORT_DUPLICATE before approval. Result: repeat exports update or link the existing task/card/work item instead of creating duplicate work.
7. Approve only after the provider target, field mapping and preview match the customer workflow. Result: WebRiskOps queues the export and keeps status sync tied to the original source.

Choose a work manager

Each work manager has a different destination model.

• `trello_cloud` creates or updates Trello cards. Trello ticket export is cloud-only; `trello_self_hosted` must stop with a cloud-only blocked state.
• `linear_cloud` creates or updates Linear issues for a mapped team and optional project.
• `azure_devops_services` or `azure_devops_server` creates or updates Azure DevOps work items.
• `youtrack_cloud` or `youtrack_server` creates or updates YouTrack issues.
• `asana_cloud` creates or updates Asana tasks.
• `clickup_cloud` creates or updates ClickUp tasks.

Map provider fields

Complete the field mapping that matches the selected provider before approval.

• Trello needs board_id, list_id, labels and member mapping; acceptance criteria become checklist items.
• Linear needs team_id, optional project, label IDs, assignee and priority.
• Azure DevOps needs project, work_item_type, area path, iteration path, priority, assigned to, tags and custom fields when configured.
• YouTrack needs project, issue type or custom fields, tags, assignee and priority.
• Asana needs workspace, project, optional section, tags, assignee and custom fields.
• ClickUp needs workspace, space/folder/list, status, priority, tags, assignee and custom fields.

Ready work management export states

Continue only when the selected provider can accept the mapped task.

• Provider target ready means the selected work manager is active for the same account and project as the report.
• Mapping ready means the required board, list, team, project, workspace or work_item_type fields are set.
• Preview ready means the task body is evidence-safe and includes acceptance criteria.
• Duplicate reference ready means an existing external_issue_id can be opened or updated through Status sync and duplicate handling.
• Portable fallback ready means a CSV, Markdown or JSON handoff is available when the provider target is missing or unsafe.

Blocked work management states

Blocked states should route the customer to a concrete next action.

• Mapping missing means choose the provider's board, team, project, workspace, list or work item type before retrying.
• Target inactive or credential missing means reconnect the provider from integration setup.
• Self-hosted Azure DevOps Server and YouTrack Server targets need safe base URLs plus any required private-network authorization.
• Provider validation failed means review the mapped fields named in the product message, then retry.
• Rate limits keep the attempt retry scheduled; do not approve another export for the same source.
• Secret or private artifact in preview means redact evidence before creating or updating the provider task.

Continue after work management export

Continue to Webhook export when the customer owns an automation endpoint instead of a planning tool. Use Status sync and duplicate handling before re-exporting a source that already has a provider task, and Portable export fallbacks when no work management target is ready.