When a Jira Ticket Can Steal Your Secrets