Hi
We are using Atlassian Bitbucket v5.7.0.
Is there a ability to restrict commits with non-valid usernames?
more details:
We are using authentication with ldap and it works well but any user is able to specify any likes him Author name and as result we is not able to identify who did those commit so we need strict compliance Author of commit and bitbucket user.
Bitbucket Server has a bundled 'Verify Committer' hook that blocks any push that contains commits with a Committer that does not match the user that pushed the commits. It matches the user with the committer on the email address.
You can enable the hook in Repository > Settings or Project > Settings. See the documentation for more info.
If you need strict compliance, you could also consider using signing all commits with GPG keys and enabling the 'Verify Commit Signature' hook to reject any push with unsigned commits or commits signed with an unknown/invalid/expired key.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.