Integrations / Bitbucket
Junglewise for Bitbucket
Sign in with Atlassian and pick the repositories Junglewise may see. It checks their dependencies against new vulnerabilities, follows pipelines and pull requests as they happen, explains what matters, and drafts the fix. Read access only: nothing in your repositories changes unless you change it.
Sign in with Atlassian. Read access. About 1 min to set up.
Connecting Bitbucket
How you connect it
- Step 1
Sign in with Atlassian. Bitbucket shows you the read permissions Junglewise asks for before you grant anything.
- Step 2
Choose the repositories. Each starts switched off until you enable it.
- Step 3
Junglewise scans the enabled repositories straight away, then every 24 hours. Setup takes about a minute.
What Junglewise reads
Watched around the clock
Dependencies
Each enabled repository's manifests and lock files, checked daily and on demand against new vulnerabilities.
Pipelines
Every completed pipeline, so a failing run on the main branch is noticed.
Pull requests
Pull requests as they open, merge and decline, so the agent can read the change behind a finding.
Branch protection
Whether the main branch has restrictions, where your workspace lets Junglewise see them.
What it changes
Nothing. It drafts the fix.
Upgrade a vulnerable dependency
Which package, which version fixes it, and the manifest line to change.
Protect the main branch
The branch restriction to add so nothing lands without a passing pipeline and a review.
Rotate a leaked key
Step by step: issue a new one at the provider, update where it is used, then revoke the old one.
Junglewise only reads from Bitbucket, so every fix is yours to apply. It checks afterwards that the fix worked.
Bitbucket questions
- Does Junglewise keep a copy of my source code?
- No. It reads the manifests it needs to produce a finding, and keeps the finding, not the code.
- Can Junglewise change my repositories?
- No. It reads with account, repository, pull request and pipeline read permissions, and drafts each fix for you to apply.
- How do I disconnect?
- Revoke Junglewise under Authorized applications in your Bitbucket personal settings. Junglewise loses access immediately.
See what's lurking out there. It takes 30 seconds.
Start with a free scan of your domain. When you're ready for the inside view, try Team free for 14 days.
Start 14-day free trial