Bitbucket Pipes Digest: November 2021

Igor Stoyanov

Pipes monthly digest November 2021

Hi,

Welcome to the next Bitbucket Pipes digest. This month comes packed with additions to Pipes. Don’t forget to subscribe (click Watch and select Articles)!

New pipes

configcat/scan-repository-pipe

configcat/scan-repository-pipe:1.0.0 Find code references to ConfigCat feature flags and settings in your source code.

script:
  - pipe: configcat/scan-repository-pipe:1.0.0
    variables:
      CONFIG_ID: 'YOUR-CONFIG-ID'

  

fortifysoftware/fortify-scan

fortifysoftware/fortify-scan:3.2.9 Build secure software fast with Fortify SAST scans.

script:
  - pipe: fortifysoftware/fortify-scan:3.2.9-jdk-11
    variables:
      PACKAGE_OPTS: -bt mvn
      FOD_URL: $FOD_BASE_URL
      FOD_TENANT: $FOD_TENANT
      FOD_USER: $FOD_USER
      FOD_PAT: $FOD_PAT
      FOD_RELEASE_ID: $FOD_RELEASE_ID
      FOD_UPLOAD_OPTS: -ep 1

  

lacework/lacework-scan 

lacework/lacework-scan:1.0.0 The Lacework Scan pipe allows you to integrate Lacework security capabilities deeply into your CI/CD by allowing you to scan and assess Docker container images and software packages for vulnerabilities.

script:
  - docker build . -t "${IMAGE_NAME}:${BITBUCKET_BUILD_NUMBER}"
  - pipe: lacework/lacework-scan:1.0.0
    variables:
      LW_ACCOUNT_NAME: foobar
      LW_ACCESS_TOKEN: xdfefafda
      IMAGE_NAME: ${IMAGE_NAME}
      IMAGE_TAG: ${BITBUCKET_BUILD_NUMBER}
      SEVERITY_THRESHOLD: high

  

thundra-io/thundra-foresight-gradle-initializer

thundra-io/thundra-foresight-gradle-initializer:1.0.6 Thundra Foresight Gradle Initializer.

script:
  - pipe: thundra-io/thundra-foresight-gradle-initializer:1.0.6
    variables:
      THUNDRA_APIKEY: $THUNDRA_APIKEY
      THUNDRA_AGENT_TEST_PROJECT_ID: $THUNDRA_AGENT_TEST_PROJECT_ID
  - gradle build --init-script $BITBUCKET_CLONE_DIR/thundrainit.gradle

   

thundra-io/thundra-foresight-maven-initializer

thundra-io/thundra-foresight-maven-initializer:1.0.6 Thundra Foresight Maven Initializer.

- step:
    name: Build and Test
    caches:
      - maven
    script:
      - pipe: thundra-io/thundra-foresight-maven-initializer:1.0.6
        variables:
          THUNDRA_APIKEY: $THUNDRA_APIKEY
          THUNDRA_AGENT_TEST_PROJECT_ID: $THUNDRA_AGENT_TEST_PROJECT_ID
      - mvn -B verify --file pom.xml

 

 

Updated pipes

atlassian/aws-cloudformation-deploy

atlassian/aws-cloudformation-deploy:0.12.0 Deploy your stack configuration template to AWS CloudFormation. Update awscli to v2.

  

mablhq/mabl-deployment

mablhq/mabl-deployment:1.1.0 Create a deployment event in mabl to run end-to-end tests against your application and take action based on the test results. Upgrade mabl cli to version 1.10.9 to pick up improvements to exit codes on unexpected failures.

  

meterian-bot/meterian-scan

meterian-bot/meterian-scan:2.0.2 Scan for vulnerabilities in your projects with the Meterian scanner through this Bitbucket Pipe in your Pipeline configuration. Applied updates to support new Alpine-based parent image and its new tools. Enforcing overall grant of permission on rust binaries folder.

  

atlassian/aws-eks-kubectl-run

atlassian/aws-eks-kubectl-run:2.2.0 Execute a kubectl command on your Amazon EKS (Elastic Kubernetes Service) cluster. Upgrade kubectl lib 1.19 -> 1.21. Add support for ROLE_ARN parameter.

  

atlassian/serverless-deploy

atlassian/serverless-deploy:1.1.1 Deploy your Serverless framework application using AWS, Google Cloud Platform or Microsoft Azure providers. Update README doc with custom CONFIG example.

  

atlassian/checkstyle-report

atlassian/checkstyle-report:0.3.0 Finds Checkstyle report files in working directory and converts the results into a Bitbucket Code Insight Report. Add reporter field to report payload. Support configurable title of checkstyle report.

  

atlassian/aws-lambda-deploy

atlassian/aws-lambda-deploy:1.2.0 Deploy function to AWS Lambda. Support lambda deployment from ECR container image. Bump boto3 to 1.18.* version.

  

atlassian/scp-deploy

atlassian/scp-deploy:1.2.1 Copy files to a remote server using SCP. Provide advanced example with adding PROXY_COMMAND for complex quotes. Update dependencies for openssh-client, sshpass in Dockerfile.

  

carbonetes/carbonetes-scan

carbonetes/carbonetes-scan:1.4.2 Seamlessly integrates complete container analysis directly into your CI/CD pipeline. Update api call to carbonetes analyzer.

  

atlassian/google-gke-kubectl-run

atlassian/google-gke-kubectl-run:2.1.0 Run a kubectl command on your Google Kubernetes Engine cluster. Added support of KUBECTL_APPLY_ARGS.

  

atlassian/ssh-run

atlassian/ssh-run:0.4.0 Run a command or script on your server. Updated information about DEBUG attribute.

  

atlassian/trigger-pipeline

atlassian/trigger-pipeline:4.3.0 Trigger a pipeline in a Bitbucket repository. Update README with details of how to trigger advanced example with custom branch.

 

To discover more pipes, visit our Bitbucket Pipes Marketplace.

 

Top Community questions

• How can I upload to an S3-compatible object store that is *not* aws?

• SFTP deletes files or no?

• About atlassian/email-notify, is there a way to increase de limit of recipients?

If you’d like to suggest a pipe to be improved or new pipe to be implemented, please, find the appropriate ticket in the list of existing tickets , vote for them or create a new suggestion request with type Suggestion and Component: Pipelines - Pipes.

If you’d like help with Bitbucket Pipes, or you have an issue or feature request, let us know on Community.