Enterprise Software Supply Chain Manager (ESSCM)IntegrationsSource Code (SCM)
Bitbucket
Connect Bitbucket repositories to generate SBOMs
Bitbucket Integration
Connect your Bitbucket repositories to Safeguard for SBOM generation and vulnerability scanning.
Prerequisites
- A Bitbucket account
- For private repositories: Username and App Password
Public Repositories
Step 1: Navigate to Integrations
Go to Integrations from the sidebar and click Connect on the Bitbucket card.
Step 2: Enter Repository URL
- Select the Public tab
- Enter a Name for this configuration
- Optionally add a Description
- Enter the public Bitbucket repository URL (e.g.,
https://bitbucket.org/atlassian/aui) - The system validates the URL and shows "Repository URL is valid"
- Click Add to add the URL to the list
Step 3: Review Added URLs
Your added repository URLs appear in the Added URLs table. Click Next to proceed.
Step 4: Review & Connect
- Select which repositories to include using checkboxes
- Configure Branch/Tag for each repository
- Set the Project Name (defaults to repository name)
- Set the Version (defaults to 1.0.0)
- Click Connect to complete
Step 5: View Configuration
Your configuration appears in the Project Configurations table.
Private Repositories
Step 1: Navigate to Integrations
Go to Integrations from the sidebar and click Connect on the Bitbucket card.
Step 2: Enter Credentials
- Select the Private tab
- Enter a Name for this configuration
- Optionally add a Description
- Enter your Bitbucket Credentials:
- Username - Your Bitbucket username
- Access Token / App Password - Your Bitbucket app password
- Click Verify Credentials
Step 3: Credentials Verified
Once verified, you'll see "Credentials verified successfully!" Click Next to proceed.
Step 4: Select Workspace and Repositories
- Select Workspace - Choose the Bitbucket workspace
- Review & Configure Repositories - Select repositories to scan
- Configure Branch/Tag, Project Name, and Version
- Click Connect to complete
Step 5: View All Configurations
Your configuration appears in the Project Configurations table.
Creating an App Password
To connect private repositories, you need a Bitbucket App Password.
Steps to Create App Password
- Go to bitbucket.org and sign in
- Click your profile picture then Personal settings
- Under Access management, click App passwords
- Click Create app password
- Enter a label (e.g., "Safeguard Integration")
- Select the required permissions:
Required Permissions
| Permission | Description |
|---|---|
| Repositories: Read | Read access to repositories |
| Account: Read | Read access to account information |
- Click Create
- Copy the app password immediately (it won't be shown again)
Troubleshooting
"Credentials verification failed"
- Ensure you're using your Bitbucket username (not email)
- Verify the app password was copied correctly
- Check that the app password has the required permissions
"Workspace not found"
- Ensure your account has access to the workspace
- Verify the app password has workspace access
"Repository not found"
- Check that the repository URL is correct
- For private repos, ensure the app password has repository read access