xray-integration
Imports CI test results into Xray for Jira - authenticates via the `client_id` + `client_secret` → JWT exchange (Cloud) or PAT / Basic (Server), posts to the format-specific `/api/v2/import/execution/*` endpoint (`/junit` for JUnit XML, `/cucumber` for Cucumber JSON, `/nunit` / `/testng` / `/robot` for the others), and maps automated results to existing Xray Test issues via the `xray-junit-extensions` `@XrayTest(key="...")` annotation. Use when the team uses the Xray Jira app to manage Test, Test Set, and Test Execution issue types and CI must keep those execution issues in sync; for the other Jira TCM app use zephyr-integration (Zephyr Scale), for standalone non-Jira TestRail use testrail-integration, and for hosted cross-run flakiness analytics rather than TCM sync use currents-integration.
Install with skills.sh (any agent)
npx skills add testland/qa --skill xray-integrationxray-integration
Overview
Xray exposes test cases / executions as Jira issue types (Test, Test Set, Test Plan, Test Execution, Pre-Condition) - automated test sync writes results into Test Execution issues.
Xray comes in two flavors:
| Flavor | Auth | Import endpoints |
|---|---|---|
| Xray Cloud | client_id + client_secret → JWT | https://xray.cloud.getxray.app/api/v2/import/... |
| Xray Server / DC | Jira PAT or Basic auth | https://<jira>/rest/raven/2.0/import/... |
This skill covers the Cloud flow as the primary path; Server notes are inline.
The official documentation is at docs.getxray.app. At the time of authoring (2026-05-05), the Cloud import-results page was 403 to automated WebFetch; the URL is the canonical reference for real-browser navigation. The well-known endpoints + payload shapes below are documented in the official xray-junit-extensions GitHub repo (xray-junit-ext (opens in new window)) and the xray-postman-collections public collections, both first-party Xray-App tools.
When to use
How to use
Step 1 - Authenticate (Cloud)
Per the xray-junit-ext (opens in new window) reference, Cloud auth is a two-step flow:
# 1. Exchange credentials for a JWT
JWT=$(curl -X POST 'https://xray.cloud.getxray.app/api/v2/authenticate' \
-H 'Content-Type: application/json' \
-d '{"client_id": "'"$XRAY_CLIENT_ID"'", "client_secret": "'"$XRAY_CLIENT_SECRET"'"}' \
| tr -d '"')
# 2. Use the JWT in subsequent requests
curl -X POST 'https://xray.cloud.getxray.app/api/v2/import/execution/junit' \
-H "Authorization: Bearer $JWT" \
-H 'Content-Type: application/xml' \
--data-binary @junit.xmlThe JWT has a 24-hour validity (well-documented across Xray API clients); refresh per CI run.
For Xray Server / DC, use a Jira PAT or Basic auth instead; the JWT step is skipped.
Step 2 - Pick the import endpoint per format
| Test runner output | Cloud endpoint |
|---|---|
| JUnit XML (Maven, Gradle, Jest, pytest, etc.) | /api/v2/import/execution/junit |
| Cucumber JSON | /api/v2/import/execution/cucumber |
| TestNG XML | /api/v2/import/execution/testng |
| NUnit XML (.NET) | /api/v2/import/execution/nunit |
| xUnit XML (.NET) | /api/v2/import/execution/xunit |
| Robot Framework XML | /api/v2/import/execution/robot |
| Generic JSON (Xray-shape) | /api/v2/import/execution |
Each endpoint accepts the format's native output and parses it server-side; no per-test pre-mapping is needed.
For the generic JSON endpoint, payload shape:
{
"info": {
"summary": "CI run for ABC-123",
"description": "Automated regression run",
"user": "ci-runner",
"version": "1.4.5",
"revision": "abc1234",
"testPlanKey": "PROJ-100",
"testEnvironments": ["staging", "chrome"]
},
"tests": [
{
"testKey": "PROJ-1234",
"start": "2026-05-05T14:00:00Z",
"finish": "2026-05-05T14:00:12Z",
"comment": "Test passed cleanly",
"status": "PASSED"
}
]
}Step 3 - Map test methods to Xray Test issues
Per xray-junit-ext (opens in new window), the JUnit 5/6 extension provides two annotations:
@XrayTest
"enforce mapping of result to specific, existing Test identified by issue key, using the key attribute" (xray-junit-ext (opens in new window))
@Test
@XrayTest(key = "CALC-1000")
public void canAddNumbers() { /* ... */ }Without @XrayTest, the extension auto-creates a Test issue per JUnit method on first run (auto-provisioning). Pinning with key prevents drift across renames.
@Requirement
"identify the covered requirement(s) ... it's possible to identify one covered issue or more" (xray-junit-ext (opens in new window))
@Test
@Requirement("CALC-1234")
public void canAddNumbers() { /* ... */ }This populates the Jira-side coverage link from the test back to the requirement issue.
Step 4 - XrayTestReporter for evidence
Per xray-junit-ext (opens in new window), the XrayTestReporterParameterResolver extension injects an XrayTestReporter into test methods:
"Add comments to Test Runs / Define Test Run custom field values / Attach evidence files" (xray-junit-ext (opens in new window))
@Test
@ExtendWith(XrayTestReporterParameterResolver.class)
@XrayTest(key = "CALC-1000")
public void canAddNumbers(XrayTestReporter reporter) {
// ... test logic ...
reporter.addComment("Calculator returned correct sum");
reporter.addEvidence("screenshot.png");
}Evidence files are attached to the Test Run inside the Test Execution issue - useful for failure debugging from Jira.
Step 5 - Configure the extension
Per xray-junit-ext (opens in new window), the extension reads xray-junit-extensions.properties for output config:
# xray-junit-extensions.properties (place on the test classpath)
report_filename=TEST-results
report_directory=target/xray-reports
add_timestamp_to_report_filename=falseThe output is JUnit XML augmented with Xray-specific metadata; pass this enriched XML to the import endpoint (Step 2).
Step 6 - Operating in CI
Run the import as an if: always() step after the test step so failed runs still reach Xray. Fetch a fresh JWT (Step 1), mask it (::add-mask::), then POST the Xray-extended JUnit XML to /api/v2/import/execution/junit?projectKey=<KEY> - projectKey (the Jira project key) is the critical query param; without it the import fails or lands in the wrong project. JVM suites emit the enriched XML via xray-junit-extensions (Step 5); non-JVM teams use the official Playwright reporter. The full GitHub Actions workflow and the Playwright reporter setup are in references/ci-and-non-jvm.md.
Verify after the POST: assert a 2xx whose body carries the Test Execution issue key the import created or updated. A 4xx (bad projectKey, expired JWT, or malformed XML) or a body with no key means nothing landed - fix that cause and re-run; retry once on a 5xx (transient), and never treat a non-2xx as success.
Step 7 - Test Execution issue lifecycle
By default, each import creates a new Test Execution issue. For "update an existing execution per build" (e.g. one execution per release branch), pass testExecKey=PROJ-XYZ in the query string:
POST /api/v2/import/execution/junit?projectKey=CALC&testExecKey=CALC-9999Pattern:
Worked example
A Maven + JUnit 5 suite syncing one release run to Jira project CALC:
@Test
@XrayTest(key = "CALC-1000")
public void canAddNumbers() { /* ... */ }curl -X POST 'https://xray.cloud.getxray.app/api/v2/import/execution/junit?projectKey=CALC&testExecKey=CALC-9999' \
-H "Authorization: Bearer $JWT" \
-H 'Content-Type: application/xml' \
--data-binary @target/xray-reports/TEST-results.xmlThe result lands in Test Execution CALC-9999 with CALC-1000 marked Passed. PR runs omit testExecKey to get a fresh execution per push (Step 7).
Anti-patterns
| Anti-pattern | Why it fails | Fix |
|---|---|---|
Auto-provisioning Test issues without @XrayTest(key=...) | Renaming a test method creates a new Test issue; old one orphans. | Pin every test method to an existing issue with @XrayTest(key="...") (Step 3). |
| Storing JWT secret in repo / log | Cloud secret leak; immediate quota abuse. | Mask in CI; fetch fresh per run; never log (Step 6 ::add-mask::). |
Importing without projectKey | Import lands in default project; other teams see your tests. | Always pass projectKey (Step 6). |
| New Test Execution per PR push | 100+ Jira issues per active PR; project clutter. | Reuse testExecKey per PR; create new only on push to main (Step 7). |
| Using regular JUnit XML reporter (not the Xray-extended one) | Loses @XrayTest / @Requirement annotations; mapping fails. | Use xray-junit-extensions for JVM (Step 5) or the official Playwright reporter (references). |
| Long-lived JWT cache (>24h) | Auth fails; CI runs broken silently. | Fetch JWT per run; respect the 24h validity. |
| Importing 5,000 results in one request | Server times out; partial state. | Split per suite or per Test Execution; Xray Cloud's import endpoints are sized for typical CI batches. |
Limitations
References
Xray CI wiring and the non-JVM Playwright path
View source (opens in new window)Xray CI wiring and the non-JVM Playwright path
Deep reference for the xray-integration SKILL.md. Consult for the end-to-end GitHub Actions workflow (JWT fetch + import) and the official Playwright reporter that lets non-JVM teams emit Xray-compatible JUnit XML.
End-to-end CI shape
# .github/workflows/xray-sync.yml
- name: Run tests with Xray-aware JUnit reporter
run: ./mvnw -B verify
# Produces target/xray-reports/TEST-results.xml
- name: Get Xray JWT
id: xray_auth
env:
XRAY_CLIENT_ID: ${{ secrets.XRAY_CLIENT_ID }}
XRAY_CLIENT_SECRET: ${{ secrets.XRAY_CLIENT_SECRET }}
run: |
JWT=$(curl -s -X POST 'https://xray.cloud.getxray.app/api/v2/authenticate' \
-H 'Content-Type: application/json' \
-d '{"client_id":"'"$XRAY_CLIENT_ID"'","client_secret":"'"$XRAY_CLIENT_SECRET"'"}' \
| tr -d '"')
echo "::add-mask::$JWT"
echo "jwt=$JWT" >> "$GITHUB_OUTPUT"
- name: Import to Xray
if: always()
run: |
curl -X POST 'https://xray.cloud.getxray.app/api/v2/import/execution/junit?projectKey=CALC' \
-H "Authorization: Bearer ${{ steps.xray_auth.outputs.jwt }}" \
-H 'Content-Type: application/xml' \
--data-binary @target/xray-reports/TEST-results.xmlThe projectKey requirement is covered in SKILL Step 6, JWT masking and the 24h refresh in Step 1; both apply unchanged to the YAML above.
Non-JVM teams: Playwright reporter
Per the Xray-App GitHub org, the playwright-junit-reporter (opens in new window) project ships a Playwright reporter that emits Xray-compatible JUnit XML. JavaScript teams use:
// playwright.config.ts
reporter: [
['list'],
['@xray-app/playwright-junit-reporter', {
outputFile: 'target/xray-reports/results.xml',
}],
],Then the same import endpoint (End-to-end CI shape, above) consumes the output.
Related skills
allure-reports
Configures Allure Report (test-runner adapter install, `allure-results` directory wiring, `categories.json` for failure classification, `history-trend.json` retention via the copy-history-between-runs pattern), runs the Allure CLI to convert `allure-results` to a static HTML site, and uploads the report as a CI artifact. Use when the team needs richer test reporting than JUnit XML - step-level attachments, per-test history, retry tracking, and severity / epic / feature labeling across framework-agnostic adapters (pytest, Jest, JUnit, TestNG, NUnit, Mocha). As a rich static HTML report generator, it is the open-source alternative to extentreports (JVM/.NET per-test HTML narrative); for hosted cross-run flakiness analytics rather than a static per-run report use currents-integration.
cobertura-analysis
Parses Cobertura XML coverage reports (the JVM-canonical format originally from the cobertura-cobertura tool, also emitted by JaCoCo `--coverage-xml`, coverage.py `--xml`, Istanbul / Jest `cobertura` reporter, gocover-cobertura, and dotnet's `coverlet`). Walks the coverage-04 DTD structure (coverage → packages → classes → methods → lines + conditions), computes per-file deltas, and emits PR-time gating verdicts. Use when the existing CI emits Cobertura XML - typical for JVM-heavy stacks and tools that ship Cobertura as a default reporter.
coverage-diff-reporter
Builds a per-PR coverage delta report from any pair of LCOV / Cobertura / JSON coverage outputs (current run + baseline from the merge target) - emits a per-file table with line% / branch% deltas, called-out new files, hidden drops (overall +0.1pp but one file -8pp), and a single-line PR-comment summary. Use when the team has coverage in CI but needs human-readable PR feedback that points at the specific file the reviewer should focus on, not just an aggregate number.
coverage-py-analysis
Configures coverage.py for Python projects - wires `coverage run` (replacing `python` for instrumentation), enables branch coverage via the `--branch` flag or `branch = True` config, manages the `.coverage` data file (single-process and `combine` for parallel pytest-xdist runs), authors `.coveragerc` with `source` / `omit` / `fail_under`, and emits the format the downstream tool needs (`coverage report` for terminal, `coverage xml` for Cobertura, `coverage html` for human review, `coverage lcov` for SaaS, `coverage json` for programmatic post-processing). Use for any Python test stack (pytest, unittest, nose) that needs PR-time coverage signal.
currents-integration
Wires Currents.dev cross-run test analytics into a Playwright suite: installs `@currents/playwright`, authors `currents.config.ts` (env-sourced `recordKey` + `projectId`), registers `currentsReporter()`, enables trace/video/screenshot artifacts, and runs via `npx pwc` so per-test traces stream to the Currents dashboard with over-time flakiness, slowest-test, and pass-rate trends. Use when a Playwright suite needs hosted cross-run suite-health analytics; for a static per-run report use extentreports or allure-reports, and to sync results into Jira test management use zephyr-integration or xray-integration.
extentreports
Configures ExtentReports v5 for a JVM (or .NET via `extentreports-dotnet`) test run: wires `ExtentSparkReporter`, `attachReporter`, `createTest`, the `info`/`pass`/`warning`/`skip`/`fail` log chain, screenshots via `MediaEntityBuilder`, hierarchical `createNode` parent/child tests, and category/author/device labels, emitting a static HTML report alongside JUnit XML for CI artifact upload. Use when a suite on the Aventstack ExtentReports stack wants a richer per-test HTML narrative than JUnit XML gives; for code-coverage reporting use jacoco-analysis, and for hosted cross-run flakiness analytics use currents-integration.
jacoco-analysis
Configures JaCoCo for JVM projects (Java / Kotlin / Scala / Groovy) - wires the runtime agent via `jacoco-maven-plugin` `prepare-agent`, generates per-build reports (HTML / XML / CSV) via the `report` goal, gates the build via the `check` goal with element / limit / minimum rules, parses the six native counters (instructions, branches, lines, methods, classes, cyclomatic complexity), and converts JaCoCo XML to LCOV / Cobertura when downstream tools need a different format. Use when the JVM build is Maven / Gradle and the team wants the canonical JVM coverage tool - or to convert JaCoCo output for cross-language coverage aggregation.
jest-coverage-analysis
Configures Jest's built-in coverage (Istanbul-instrumented `babel` provider or V8-native `v8` provider), wires the right `coverageReporters` for downstream consumption (`lcov` for SaaS / cross-tool, `cobertura` for Jenkins, `text-summary` for terminal, `html` for human review), authors per-file `coverageThreshold` rules that focus the gate on critical paths (vs the global-only foot-gun), and parses the per-file JSON output for PR-time deltas. Use when the project tests with Jest (or Vitest, which uses the same Istanbul/V8 provider) and the team needs PR-time coverage signal that's both local-runnable and CI-gateable.
junit-xml-analysis
Parses JUnit-format XML reports (the de-facto interchange format every CI ingests - Jenkins, GitHub Actions, GitLab, Buildkite, CircleCI) into structured, machine-readable per-suite and per-case metrics tables (passed / failed / errored / skipped, time, classname, message, stack), groups failures by classname for trend analysis, and distinguishes "new failures vs flakes" by cross-referencing the `flakyFailure` and `rerunFailure` rerun elements. Use when the downstream consumer is a dashboard, script, or aggregator - not when the goal is a human-readable prose summary (use test-run-summary-author for that). Single-run, in-XML aggregation only; for cross-run cross-environment roll-ups, use a cross-run test-suite aggregator.
lcov-analysis
Parses LCOV `.info` text files (the de-facto coverage interchange format produced by gcov, llvm-cov, Coverage.py via `py2lcov`, JaCoCo via `xml2lcov`, Devel::Cover, Jest via `lcov` reporter, NYC, and most others). Extracts per-file line / function / branch metrics from the canonical record keywords (TN/SF/FN/FNDA/FNF/FNH/BRDA/BRF/BRH/DA/LH/LF), computes the diff vs a baseline, and emits per-file gating verdicts. Use for PR coverage gates that don't depend on a specific language runtime.
test-coverage-targeter
Builds a "what to test next" recommendation by combining a coverage report (LCOV / Cobertura / coverage.py JSON / Jest JSON / JaCoCo XML) with the PR's `git diff`, ranking uncovered branches by risk × cost - risk weighted by McCabe cyclomatic complexity and code-churn frequency, cost weighted by the unit-test pyramid layer (unit tests cheaper than integration than E2E). Emits a prioritized list with concrete file:line targets and the test layer recommended for each. Use when a team has the budget to write 5 - 10 new tests and needs help picking which uncovered code to target first instead of blindly chasing 100% coverage.
test-run-summary-author
Build-an-X workflow that turns a structured test-run artifact (JUnit XML, Allure JSON, TestRail / Xray / Zephyr export) plus optional release context (version, build URL, deploy target) into a narrative markdown summary for release notes, an exec status update, or a stand-up Slack post. Distinct from the per-framework parsers junit-xml-analysis / allure-reports / coverage-diff-reporter, which emit structured tabular reports: this skill takes the same data and writes the human-readable narrative. Use when a manager needs a draft release note or stand-up summary from a single run; for cross-run trend analytics use currents-integration.
testrail-integration
Syncs test runs / results / cases between an automated test suite and TestRail (Gurock / Idera) - opens a Test Run for the build (`add_run`), batches per-case results back via `add_results_for_cases` (preferred over per-test `add_result_for_case` - N+1 API calls vs 1), maps the test framework's pass/fail/skip to TestRail status IDs, and attaches build URL + version + elapsed time. Use when the team's test management is standalone TestRail (not a Jira app) and automated suites must update it without a human copy-paste step; when the TCM is instead a Jira app use xray-integration (Xray) or zephyr-integration (Zephyr Scale), and for hosted cross-run flakiness analytics rather than TCM sync use currents-integration.
zephyr-integration
Syncs automated test results to Zephyr Scale for Jira (formerly TM4J / SmartBear / Adaptavist): picks the product variant (Scale Cloud / Squad / Enterprise), authenticates with a long-lived API token as a Bearer header, opens a Test Cycle per build, posts executions via `POST /testexecutions` (or bulk JUnit via `/automations/executions/junit`), and maps test methods to Zephyr Test Cases via `@TestCaseKey`-style annotations. Use when the team's Jira test management is Zephyr Scale; for the Xray Jira app use xray-integration, for standalone TestRail use testrail-integration, and for over-time flakiness analytics rather than TCM sync use currents-integration.