Vulnerability scans

[Sundara Rao Damaraju]

If I use Bitbucket for cross-team code collaboration and deployment, does Bitbucket take care of vulnerability scanning for the code being continuously checking-in? 

I have a broad, If I use CI/CD continuously deploy code when and how we take care of architecture security, code coverage, and vulnerability scans? what kind of remediations are possible for the security threats identified in a CI/CD environment. 

[Theodora Boudale · Accepted solution]

Hi @Sundara Rao Damaraju ,

I'm afraid that we don't have this functionality in Bitbucket Cloud.

However, there are add-ons developed for Bitbucket Cloud by other companies that provide this. These add-ons can be installed from a workspace's Settings > Marketplace.

You can see here:

• https://marketplace.atlassian.com/search?hosting=cloud&product=bitbucket&query=vulnerability

and check if any of them fits your needs. If you open the page of each add-on, you'll see a tab Support that usually includes documentation and contact details of the vendor in case you have any questions.

Kind regards,
Theodora