Bitbucket Free & Standard: PR Scans Setup

Publish PR scan results and comments for issues from Aikido. No pipeline code needed.

circle-exclamation

Set up Bitbucket PR Scanning

1

Create a dedicated Bitbucket user

Create a dedicated user like AikidoSec. Use it only for Aikido.

Give this user admin access on the repositories you want to gate. Aikido needs it to create and manage repository webhooks.

2

Enable the integration

Log in to Bitbucket as the new user.

In Aikido, open the Integrationsarrow-up-right page. Then select Bitbucket under PR Quality Gating.

3

Grant access

You’ll be redirected to Bitbucket. Approve the requested access.

4

Configure your first repository

After authorization, Aikido opens the Bitbucket PR Checksarrow-up-right page.

Start with one repository first. Confirm everything works before rolling out broadly.

5

Verify with a new PR

Open a new PR in the repo you configured. Then confirm the checks run.

Comments should appear as the user you created in step 1 (for example, AikidoSec).

6

Enable for all repositories

Once you’re happy with the results, go back to the Bitbucket PR Checksarrow-up-right page and enable checks for the rest of your repositories.

7

Set the default for new repositories

In the top-right, open Actions and select Set Default for New Repos and enable automatic configuration for newly added repositories in the future.

Need the UI walkthrough? See Default PR/MR gating configuration for new repositories.

circle-info

On Bitbucket Free and Standard, you can’t require the Aikido scan to be successful to prevent merges. This requires Bitbucket Premium.

See Atlassian: Suggest or require checks before a mergearrow-up-right.

Last updated

Was this helpful?