Safeguard Documentation Center
Enterprise Software Supply Chain Manager (ESSCM)IntegrationsSource Code (SCM)

Bitbucket

Connect Bitbucket repositories to generate SBOMs

Bitbucket Integration

Connect your Bitbucket repositories to Safeguard for SBOM generation and vulnerability scanning.

Prerequisites

  • A Bitbucket account
  • For private repositories: Username and App Password

Public Repositories

Step 1: Navigate to Integrations

Go to Integrations from the sidebar and click Connect on the Bitbucket card.

Step 2: Enter Repository URL

  1. Select the Public tab
  2. Enter a Name for this configuration
  3. Optionally add a Description
  4. Enter the public Bitbucket repository URL (e.g., https://bitbucket.org/atlassian/aui)
  5. The system validates the URL and shows "Repository URL is valid"
  6. Click Add to add the URL to the list

Step 3: Review Added URLs

Your added repository URLs appear in the Added URLs table. Click Next to proceed.

Step 4: Review & Connect

  1. Select which repositories to include using checkboxes
  2. Configure Branch/Tag for each repository
  3. Set the Project Name (defaults to repository name)
  4. Set the Version (defaults to 1.0.0)
  5. Click Connect to complete

Step 5: View Configuration

Your configuration appears in the Project Configurations table.


Private Repositories

Step 1: Navigate to Integrations

Go to Integrations from the sidebar and click Connect on the Bitbucket card.

Step 2: Enter Credentials

  1. Select the Private tab
  2. Enter a Name for this configuration
  3. Optionally add a Description
  4. Enter your Bitbucket Credentials:
    • Username - Your Bitbucket username
    • Access Token / App Password - Your Bitbucket app password
  5. Click Verify Credentials

Step 3: Credentials Verified

Once verified, you'll see "Credentials verified successfully!" Click Next to proceed.

Step 4: Select Workspace and Repositories

  1. Select Workspace - Choose the Bitbucket workspace
  2. Review & Configure Repositories - Select repositories to scan
  3. Configure Branch/Tag, Project Name, and Version
  4. Click Connect to complete

Step 5: View All Configurations

Your configuration appears in the Project Configurations table.


Creating an App Password

To connect private repositories, you need a Bitbucket App Password.

Steps to Create App Password

  1. Go to bitbucket.org and sign in
  2. Click your profile picture then Personal settings
  3. Under Access management, click App passwords
  4. Click Create app password
  5. Enter a label (e.g., "Safeguard Integration")
  6. Select the required permissions:

Required Permissions

PermissionDescription
Repositories: ReadRead access to repositories
Account: ReadRead access to account information
  1. Click Create
  2. Copy the app password immediately (it won't be shown again)

Troubleshooting

"Credentials verification failed"

  • Ensure you're using your Bitbucket username (not email)
  • Verify the app password was copied correctly
  • Check that the app password has the required permissions

"Workspace not found"

  • Ensure your account has access to the workspace
  • Verify the app password has workspace access

"Repository not found"

  • Check that the repository URL is correct
  • For private repos, ensure the app password has repository read access

On this page