Bitbucket Secret Scanning

Learn how to configure secret scanning for Bitbucket.

Prerequisites

• Create a Bitbucket Connection with Secret Scanning permissions

Create a Bitbucket Data Source in Infisical

Infisical UI

1. Navigate to your Secret Scanning Project’s Dashboard and click the Add Data Source button.

   

2. Select the Bitbucket option.

   

3. Configure which workspace and repositories you would like to scan. Then click Next.

   
   • Bitbucket Connection - the connection that has access to the repositories you want to scan.
   • Workspace - the Bitbucket workspace to scan secrets in.
   • Scan Repositories - select which repositories you would like to scan.
     • All Repositories - Infisical will scan all repositories associated with your connection.
     • Select Repositories - Infisical will scan the selected repositories.
   • Auto-Scan Enabled - whether Infisical should automatically perform a scan when a push is made to configured repositories.

4. Give your data source a name and description (optional). Then click Next.

   
   • Name - the name of the data source. Must be slug-friendly.
   • Description (optional) - a description of this data source.

5. Review your data source, then click Create Data Source.

   

6. Your Bitbucket Data Source is now available and will begin a full scan if Auto-Scan is enabled.

   

7. You can view repositories and scan results by clicking on your data source.

   

8. In addition, you can review any findings from the Findings Page.

   

API

To create a Bitbucket Data Source, make an API request to the Create Bitbucket Data Source API endpoint.

Sample request

Request

curl --request POST \
--url https://us.infisical.com/api/v2/secret-scanning/data-sources/bitbucket \
--header 'Content-Type: application/json' \
--data '{
    "name": "my-bitbucket-source",
    "projectId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "description": "my bitbucket data source",
    "connectionId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "isAutoScanEnabled": true,
    "config": {
        "workspaceSlug": "my-workspace",
        "includeRepos": ["*"]
    }
}'

Sample response

Response

{
    "dataSource": {
        "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "externalId": "1234567890",
        "name": "my-bitbucket-source",
        "description": "my bitbucket data source",
        "isAutoScanEnabled": true,
        "projectId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "createdAt": "2023-11-07T05:31:56Z",
        "updatedAt": "2023-11-07T05:31:56Z",
        "type": "bitbucket",
        "connectionId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "connection": {
            "app": "bitbucket",
            "name": "my-bitbucket-app",
            "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
        },
        "config": {
            "workspaceSlug": "my-workspace",
            "includeRepos": ["*"]
        }
    }
}