Oleksandr Kyrdan Atlassian Team

Hi @Sachin Kaushik Thank you for your feedback! The new pipe's version with support reports generation even pipe is failed and level of cvss: - pipe: atlassian/bitbucket-dependency-scanner:0.7.0 variables: NVD_API_KEY: $NVD_API_KEY EXTRA_ARGS: - "--failOnCVSS=7" Best regards, Oleksandr Kyrdan

Hi @Roberto Schiavone Thank you for your feedback! The new pipe's version with support levels of cvss is released: - pipe: atlassian/bitbucket-dependency-scanner:0.7.0 variables: NVD_API_KEY: $NVD_API_KEY EXTRA_ARGS: - "--failOnCVSS=7" Best regards, Oleksandr Kyrdan

Hi @Anders Ervik The new version with improvements is released: script: - pipe: atlassian/bitbucket-dependency-scanner:0.5.0 Best regards, Oleksandr Kyrdan

Hi @Laurentiu Matei The new pipe's version is released: atlassian/bitbucket-chatgpt-codereview:0.2.0 Add support for new OpenAI's ChatGPT models: o1, gpt-4o-mini, gpt-4o. Best regards, Oleksandr Kyrdan

Hi @William Francis Thanks for sharing your feedback with the community! Best regards, Oleksandr Kyrdan

Hi @Chris Flora Thank you for your question! We'll update the documentation and notify you. Best regards, Oleksandr Kyrdan

@Paul S [ERROR] Could not perform Node Audit analysis. Invalid payload submitted to Node Audit API. This issue relates to the dependency-check tool and NodeJS setup. Please, follow the next question or issues 2641, 3716, 3717 for dependency-check devs.

Hi @Paul S Happy to know that the issue was solved. The new version of the pipe is released: - pipe: atlassian/bitbucket-dependency-scanner:0.2.0 variables: NVD_API_KEY: $NVD_API_KEY UPDATE_NVD_CACHE: 'true' Best regards, Oleksandr Kyrdan

@Paul S Thanks for sharing this details, trying to understand and find a way to improve the solution. Best regards, Oleksandr Kyrdan

@Paul S It would be nice if you could explain without sensitive details what the type of project and dependencies you try to scan?

Hi @Paul S Could you try dev version with force NVD cache update? - pipe: docker://bitbucketpipelines/bitbucket-dependency-scanner:0.1.4.59-dev variables: NVD_API_KEY: $NVD_API_KEY UPDATE_NVD_CACHE: 'true' as for memory issue try to set up the next: definitions: services: docker: memory: 2048 options: size: 4x According to…

Hi @Paul S Could you try the dev version with upgraded base docker image to the latest released? The new version already contains nvd database in the new upgraded H2 database format that is not compatible with an old one: - pipe: docker://bitbucketpipelines/bitbucket-dependency-scanner:0.1.4.52-dev Best regards, Oleksandr…

Hi @Paul S Thanks for sharing this. Looks like the issue on the NVD API side. Dependency checker tries to update NVD databases before the scanner execution. We are investigating this unexpected behaviour and will try to find a solution to prevent this. Best regards, Oleksandr Kyrdan

Hi @yamal Thanks for your question! To try to help you it would be nice if you could provide bitbucket-pipelines.yml configuration and full logs output without sensitive details. Best regards, Oleksandr Kyrdan

Hi @Paul S Thank you for your question! Could you check and provide a screenshot of the Metrics tab for the build step, please? You could try to increase a build step memory to solve the memory limit issue, please, check this good answer. Also, you could follow the guide with details on how memory is allocated in…

Hi @Laurentiu Matei Thank you for your question! Work with JSON is important for pipe implementation and OpenIAI modify this for a new models as Structured Outputs. We'll investigate your feature request and notify you. Best regards, Oleksandr Kyrdan

@xavi Thanks for your feedback!

Hi @Max H @Tomáš Kováčik @iub fun @xavi The new version with report fix is released bitbucket-dependency-scanner pipe: atlassian/bitbucket-dependency-scanner:0.1.4 Also, NVD records database updated up to the current date. Thank you all for your feedback! It would be nice if you could share your feature request / feedback…

@Tomáš Kováčik coming soon ... :)

Hi @Max H Thanks for your question! Could you add DEBUG to the configuration and provide us with debug logs. We'll investigate your case. Best regards, Oleksandr Kyrdan

Hi @Sathish Kumar Reddy The new version of the pipe with http error handler for annotation is released: script: - pipe: atlassian/bitbucket-dependency-scanner:0.1.3 Welcome to use it and provide us with a feedback about your case. Best regards, Oleksandr Kyrdan

Hi @Austin_Zhang Thank you for your question! If you follow the documentation of azure-web-apps-deploy pipe, you could find details about the pipe, usage examples and variables required: AZURE_APP_ID (*)The app ID, URL or name associated with the service principal required for login. Also, pipe is open sourced and you are…

Hi @윤주오 Thanks for your contribution to the community and feedback! We'll discuss this ideas with the team and notify you. Also, pipe are open source and your are always welcome to make PR directly to the bitbucket-chatgpt-codereview pipe's repository. Best regards, Oleksandr Kyrdan

Hi @Nate Loiselle Thanks for your question! We'll investigate the issue and notify you. Best regards, Oleksandr Kyrdan

Hi @Ivo Thanks for your request! Happy news, we have released a new version of the email-notify pipe with multi-platform support(linux/amd64 and linux/arm64) script: - pipe: atlassian/email-notify:0.13.2 variables: USERNAME: 'myemail@example.com' PASSWORD: $PASSWORD FROM: 'myemail@example.com' TO: 'example@example.com'…

HI @Claudia Ballano Sanchez @Ben We have released a new version of the renovate-scan pipe based on renovate/renovate:38.19-full docker image:script: - pipe: atlassian/renovate-scan:0.6.0 variables: CONFIG_FILE_PATH: '<your-config.yaml>' There were no memory issues detected by our team. But, if you have still struggled…

Hi @Cedrik Baack Thanks for your question! You could look at this answer. Best regards, Oleksandr Kyrdan

Hi @shanedara Thanks for your question! It is a good case for the Bitbucket Pipe usage! As an example, you could use atlassian/rsync-deploy pipe: Deploy your code to any server over ssh using rsync. By default it will upload the whole directory to the target. Rsync is famous for its delta-transfer algorithm, which reduces…

Hi @sudhakar The new version of the pipe with FAIL_ON support was released: Scan the sources and pipe should fail if the KICS scanner's result status code is more than or equal to provided threshold value script: - pipe: atlassian/bitbucket-iac-scan:0.4.0 variables: FILES_TO_SCAN_PATH: ./my_files_to_scan_dir FAIL_ON: 40…

Hi @Sam Mahr We have done investigation and according to the critical breaking changes in the Serverless Framework V4 we will not upgrade to v4 soon: - Deprecation Of Non-AWS Providers - License Changes - extra layer for Authentication Via Access Or License Keys The serverless-deploy pipe was designed for deploy to a…