Security for Bitbucket
Run security audits for committed API keys, passwords, and more. Protect your dev workflow against accidental credential leaks.
-
Overview
-
Scanning Every Push with the Security Hook
-
Repository-level Scan Report
-
The Security Scan Report: Viewing Bitbucket's Overall Security Status
-
Exporting a Security Scan Report for External Use
-
Hiding false positives, revoked credentials, etc.
-
Allow-listing Detected Secrets
-
Defining Global Custom Detection Rules
-
Enabling and Disabling Global Detection Rules
-
Granting App Access to Additional Users and Groups
-
Customizing the hook reject message
-
Defining Repository-Level Detection Rules
-
REST API for Scripting & Automation
-
REST API for Mass Scanning
-
Vulnerabilities Detected by Security for Bitbucket
-
Example Vulnerabilities Detected
Security for Bitbucket