nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Bitbucket Pipes Digest: March 2025

Oleksandr Kyrdan

Pipes monthly digest March 2025

Hi,

Welcome to the next Bitbucket Pipes digest. This month comes packed with additions to Pipes. Don’t forget to subscribe (click Watch and select Articles)!

New pipes

atlassian/slack-attach-file

atlassian/slack-attach-file:0.1.1

Attach file to Slack.

Slack is organized spaces called channels — a different one for everything you’re working on. With all the people, messages and files related to a topic in one place, you can move a lot faster.

One of the most common operation a developer needs to do with Slack is sending a file to a channel which functionality is covered by this pipe.

script:
  - pipe: atlassian/slack-attach-file:0.1.1
    variables:
      TOKEN: $TOKEN
      FILEPATH: "./my_file.txt"
      CHANNEL_ID: "C0NF841BK"
      INITIAL_COMMENT: "my file comment"

blackduck-inc/blackduck-security-scan

blackduck-inc/blackduck-security-scan:0.0.1

Black Duck Security Scan pipe allows you to integrate Static Analysis Security Testing (SAST) and Software Composition Analysis (SCA) into your CI/CD pipelines.

It leverages bridge-cli, a foundational piece of technology that has built-in knowledge of how to run all major Blackduck security testing solutions.

script:
  - pipe: blackduck-inc/blackduck-security-scan:0.0.1
    variables:
      BRIDGE_POLARIS_SERVERURL: $BRIDGE_POLARIS_SERVERURL
      BRIDGE_POLARIS_ACCESSTOKEN: $BRIDGE_POLARIS_ACCESSTOKEN
      BRIDGE_POLARIS_ASSESSMENT_TYPES: 'SCA,SAST'

Updated pipes

atlassian/bitbucket-dependency-scanner

atlassian/bitbucket-dependency-scanner:0.7.0

The bitbucket-dependency-scanner pipe scans your project's dependencies and detect publicly disclosed vulnerabilities associated CVE entries.

Add support report generation in strict mode. If failOnCVSS level provided pipe will create report before fail.
Bump the pipe's base docker image to version 12.1.0.
Add limitation for CodeInsights annotation context length.
Add support for http retry handling for CodeInsights annotation.

atlassian/git-secrets-scan

atlassian/git-secrets-scan:3.1.0

Bitbucket Security: Secret Scanner

Scans your files for hardcoded secrets, keys, and passwords. Creates a security Code Insights report if secret is found.

Add commit to file path in annotations.
Update base docker image to v8.23.3.

atlassian/bitbucket-chatgpt-codereview

atlassian/bitbucket-chatgpt-codereview:0.2.0

Unlock AI's power of ChatGPT for code review of pull requests.

Add support for new OpenAI's ChatGPT models: o1, gpt-4o-mini, gpt-4o.

userway/cicd-bitbucket

userway/cicd-bitbucket:1.2.0

Bitbucket pipe to trigger UserWay Continuous-Accessibility analysis

Bumped @userway/cicd-core to the last production version.
Multiple improvements.

sonarsource/sonarcloud-scan

sonarsource/sonarcloud-scan:4.1.0

Detect bugs & vulnerabilities in your repository

Update Scanner CLI to 7.1 to support sonar.region=us.
Update Scanner CLI to 7.0.2.

atlassian/aws-eks-kubectl-run

atlassian/aws-eks-kubectl-run:3.2.0

Execute a kubectl command on your Amazon EKS (Elastic Kubernetes Service) cluster.

Update boto3 package to version 1.37.*.
Update the Readme. Fix the link in the Readme.
Bump awscli version to 2.27.27.
Bump kubectl version to 1.31.

atlassian/aws-s3-deploy

atlassian/aws-s3-deploy:2.0.1

Deploy to Amazon S3.

Update pipe logic for bash strict mode usage. Remove AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY from default repository variables.
Breaking change! You have to update your pipe variables. Take a look at the README for an additional information.