Bitbucket
- 2 Minutes to read
- Print
- PDF
Bitbucket
- 2 Minutes to read
- Print
- PDF
Article summary
Did you find this summary helpful?
Thank you for your feedback
About this document
This document gives you the step-by-step procedure to configure Bitbucket in SAFE.
Introduction
SAFE integrates with Bitbucket, and fetches the security misconfiguration of the Bitbucket account in SAFE.
Prerequisites
Access required in SAFE:
SAFE Admin Access
Access required in Bitbucket:
Bitbucket Admin Access
Required User Inputs
API URL
Workspace ID
Key
Secret
Required Scope
account: Read
project: Read
repository: Read
Generate Connection Details
Generate Workspace ID
Task:
Steps:
Log in to your Bitbucket account as Admin.
Navigate to your Workspace, by clicking on profile icon in the top right corner and select All Workspaces.
.png "image(60).png")
Select the workspace.
.png "image(61).png")
Click the Settings icon at the top-right of the screen.
Click on the Workspace settings option. Here on this page, you can get the Workspace ID. Copy and Save the Workspace ID to use later while configuring Bitbucket in SAFE.
.png "image(62).png")
How to get Key & Secret
Log in to your Bitbucket account as Admin.
Navigate to your Workspace, by clicking at profile icon on the top right corner and select All Workspaces.
.png "image(63).png")
Select the workspace.
.png "image(64).png")
Click on the Settings icon at the top-right of the screen.
Click on the Workspace settings.
Click on the OAuth consumers.
Click on the Add Consumer button.
.png "image(65).png")
Enter the Name and Description.
Enter the Callback URL as https://us.safeone.ai.
Mark the checkbox for the "This is a private consumer" option.
.png "image(66).png")
Click the the Save Button. The system redirects you to the OAuth consumer page.
.png "image(67).png")
The system displays the Key and Secret. Copy and save the Key and Secret to use it while configuring Bitbucket in SAFE.
It's important to regularly update the Key and Secret in SAFE according to its expiration date.
How to get API URL
Access the Bitbucket API documentation by clicking on the provided link.
Upon reaching the Bitbucket API documentation page, locate the section titled "URI structure".
In the exhibit provided, find the base URL highlighted as 3. Copy and save this API URL to use it while configuring Bitbucket in SAFE.
.png "image(68).png")
.png "image(60).png")
.png "image(61).png")
.png "image(62).png")
.png "image(63).png")
.png "image(64).png")
.png "image(65).png")
.png "image(66).png")
.png "image(67).png")
.png "image(68).png")
Configure Bitbucket in SAFE
Log in to your SAFE account as Admin.
Click on the Integrations option from the left navigation.
Scroll to find the Bitbucket integration card or search for Bitbucket in the search bar.
.png "image(69).png")
Hover over the Bitbucket integration card and click on the Configure button.
Enter the following:
API URL
Workspace ID
Key
Secret
Enter the Auto Sync Frequency.
Click on the Test Connection button.
Once the connection is successful, click on the Save button.
.png "image(70).png")
Once the configuration is saved successfully, click on the Sync Now button to trigger an on-demand sync.
Upon a successful sync, the system pulls the Bitbucket assets and their findings in SAFE. You can track the status of the sync in the History table.
.png "image(71).png")
.png "image(69).png")
.png "image(70).png")
.png "image(71).png")
View Results
Go to the integration homepage.
Scroll to find the Bitbucket integration card or search for Bitbucket in the search bar.
Click on the Bitbucket integration card for Finding View and Asset View.
Finding View: This tab displays all the findings details pulled from Bitbucket.
.png "image(72).png")
Asset View: This tab displays all the assets pulled from Bitbucket.
.png "image(73).png")
.png "image(72).png")
.png "image(73).png")
History
Learn More about Integration History here.
SAFE's Outgoing IP Addresses
Click here to find the outgoing IP addresses of SAFE. All traffic to any integrations in SAFE will see one IP address as the source IP of the incoming connection.
Was this article helpful?