Bitbucket Repository Access Token

Description

General

• Documentation: https://bitbucket.org/
• Summary: Bitbucket is a Git-based source code repository hosting service. It is a part of the Atlassian products. Access tokens for a repository are per-repository passwords for scripting tasks and integrating tools (such as CI/CD tools) with Bitbucket Cloud.

Revoke the secret

Secrets can be revoked through the admin interface: https://bitbucket.org/[workspace_name]/[repository_name]/admin/access-tokens

Details for Bitbucket Repo Access Token

• Family: token

• Category: version_control_platform

• Company: Atlassian

• High recall: False

• Validity check available: True

• Analyzer available: True

• On-premise instances exist: False

• Only valid secrets raise an alert: True

• Minimum number of matches: 1

• Occurrences found for one million commits: 0.09

• Prefixed: False

Secret Analyzer

Analysis Method

• Provider allows scopes enumeration: False
• Total network call count: 2
• Total call count may vary: True

HTTP Calls

Requests are designed to capture metadata and not to function effectively.

• GET: /2.0/repositories?role=member
• HEAD: /2.0/repositories

Other Calls

Non-HTTP queries or HTTP calls made through a third-party app (e.g., Python package). No other calls for this analyzer.