Attachments
Files can be attached to tickets, tasks, and comments. Attachments are stored in your organization's dedicated Azure Blob Storage container.
Uploading
(Requires the Creator or Member role — the workspace:attachments:upload permission.)
Click the upload button in the attachments section of a ticket, task, or comment. The upload goes directly from your browser to Azure Blob Storage via a short-lived signed URL — the file never passes through the Ticku application server.
File Types Allowed
| Category | Formats |
|---|---|
| Images | JPEG, PNG, GIF, WebP, SVG, BMP, TIFF |
| Documents | PDF, Word (.doc/.docx), Excel (.xls/.xlsx), PowerPoint (.ppt/.pptx) |
| Text | Plain text, CSV, Markdown |
| Archives | ZIP, RAR, 7z |
| Media | MP4, WebM, QuickTime, MP3, WAV, OGG |
Maximum file size: 25 MB
Security Validation
Before upload, Ticku validates every file against:
- Magic-byte check — blocks renamed executables (.exe, .dll, ELF binaries, shell scripts) regardless of extension
- SVG scanning — rejects SVGs containing
<script>tags orjavascript:protocols - MIME type validation — declared type must match the allowed list
Downloading
All project members (including Viewers) can download attachments. Clicking the download button generates a fresh signed URL valid for a short window — there are no permanent public download links.
Deleting
- Delete your own — Creator and Member roles can delete attachments they uploaded.
- Delete any — Creators can also delete attachments uploaded by others.
Deletion is a soft delete — the record is retained in the database for audit purposes but the file is no longer accessible.