Bitbucket

Integrating Bitbucket with Escape's ASM provides unprecedent Code-to-Cloud visibility by matching your Code Resolvers with your Cloud Resources, through API Discovery from Code.

Discovered Resources¶

The Bitbucket integration automatically discovers and inventories the following resources from your Bitbucket workspace:

• Bitbucket Repositories: All repositories within the workspace or project scope
• API Schema Files: OpenAPI specifications, GraphQL schemas, Postman collections, and other API definition files found in repositories
• Extracted APIs: API endpoints and services defined in discovered schema files

The integration scans your repositories for API schema files, extracts API definitions, and automatically classifies them as Assets (APIs) in Escape's ASM. This enables Code-to-Cloud security monitoring by linking discovered APIs to their source repositories and enabling continuous testing as code changes.

Create a Bitbucket Workspace Access Token¶

1. Create a new Workspace Access Token in your Bitbucket Settings
2. Under Scopes, select project and repository permissions
3. Copy and secure your token immediately - it cannot be viewed again after leaving the page

This token enables Escape's ASM to securely analyze your Bitbucket repositories while maintaining data privacy.

Internal Networks and Services¶

When integrating with internal networks and services, you may need to:

• Configure a Private Location
• Whitelist FQDNs

For more information, see Private Locations.