Is this secure on Bitbucket yml file - Git cloning a repository or a heroku app

[priyanka]

Hi.
On bitbucket pipeline, I want to clone a heroku app and then perform some CP (Copy ) commands after building my project on branch merge, and then want to push to heroku app.
Is this secure and correct approach  to do so ?