Bitbucket
Connect Bitbucket repositories to generate SBOMs
Permissions and token types
The Bitbucket integration guide lists the exact permissions each token needs, which token types work, and the current setup steps. Where this page and that guide differ, follow the guide.
Bitbucket Integration
Connect your Bitbucket repositories to Safeguard for SBOM generation and vulnerability scanning.
Prerequisites
- A Bitbucket account
- For private repositories: Username and App Password
Public Repositories
Step 1: Navigate to Integrations
Go to Integrations from the sidebar and click Connect on the Bitbucket card.
Step 2: Enter Repository URL
- Select the Public tab
- Enter a Name for this configuration
- Optionally add a Description
- Enter the public Bitbucket repository URL (e.g.,
https://bitbucket.org/atlassian/aui) - The system validates the URL and shows "Repository URL is valid"
- Click Add to add the URL to the list
Step 3: Review Added URLs
Your added repository URLs appear in the Added URLs table. Click Next to proceed.
Step 4: Review & Connect
- Select which repositories to include using checkboxes
- Configure Branch/Tag for each repository
- Set the Project Name (defaults to repository name)
- Set the Version (defaults to 1.0.0)
- Click Connect to complete
Step 5: View Configuration
Your configuration appears in the Project Configurations table.
Private Repositories
Step 1: Navigate to Integrations
Go to Integrations from the sidebar and click Connect on the Bitbucket card.
Step 2: Enter Credentials
- Select the Private tab
- Enter a Name for this configuration
- Optionally add a Description
- Enter your Bitbucket Credentials:
- Username - Your Bitbucket username
- Access Token / App Password - Your Bitbucket app password
- Click Verify Credentials
Step 3: Credentials Verified
Once verified, you'll see "Credentials verified successfully!" Click Next to proceed.
Step 4: Select Workspace and Repositories
- Select Workspace - Choose the Bitbucket workspace
- Review & Configure Repositories - Select repositories to scan
- Configure Branch/Tag, Project Name, and Version
- Click Connect to complete
Step 5: View All Configurations
Your configuration appears in the Project Configurations table.
Creating an App Password
To connect private repositories, you need a Bitbucket App Password.
Steps to Create App Password
- Go to bitbucket.org and sign in
- Click your profile picture then Personal settings
- Under Access management, click App passwords
- Click Create app password
- Enter a label (e.g., "Safeguard Integration")
- Select the required permissions:
Required Permissions
| Permission | Description |
|---|---|
| Repositories: Read | Read access to repositories |
| Account: Read | Read access to account information |
- Click Create
- Copy the app password immediately (it won't be shown again)
Troubleshooting
"Credentials verification failed"
- Ensure you're using your Bitbucket username (not email)
- Verify the app password was copied correctly
- Check that the app password has the required permissions
"Workspace not found"
- Ensure your account has access to the workspace
- Verify the app password has workspace access
"Repository not found"
- Check that the repository URL is correct
- For private repos, ensure the app password has repository read access