Trying to determine if our team should use pipelines for manual deployment but I can't seem to find information on security measures used. What protocol is used to send scripts?
Atlassian Team members are employees working across the company in a wide variety of roles.
February 4, 2019 edited
Hi Arielle,
The Bitbucket Pipelines team takes security extremely seriously. As we are well aware of the degree of trust our users are placing in using our infrastructure and the impact a security incident could have.
Some high level details:
All of our networking uses HTTPS, including the sending of scripts.
Environment Variables that are marked as secured are stored as encrypted values, and are masked from build logs.
Pipelines builds run on shared infrastructure, inside Docker containers with user namespace remapping enabled.
Bitbucket Pipelines (and other Atlassian products) also has a bug bounty programme for security researchers to report any vulnerabilities they find, before malicious actors can exploit them.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.