BitBucket

Aptible’s BitBucket integration keeps your asset inventory up to date, triggers recurring security activities, and ensures your repo security settings are compliant.

Automate Asset Inventories

Not all of your code repos will be in scope of your ISMS. By maintaining this list over time, you’ll be able to more quickly react to requests from auditors and customers when they are investigating your SDLC policies.

Automate procedures on repo changes

You can leverage procedures to automatically trigger processes when code repos are added or removed from BitBucket (e.g. conduct a risk analysis when a code repo is created or remove sensitive data the code repository was utilizing).

Automatic Evidence Collection

SDLC Evidence

Comply will automatically record every Pull Request merged as an event and then process them using pre-configured checks to provide evidence that your SDLC policies are being followed and visibility into when they are not being followed. The automations that come with integration will generate healthy evidence for "Approved" and "CI Success" tagged events as well as unhealthy evidence and an issue for all others.

‍

How to use Aptible and BitBucket

• Run automations on security configuration and changes to repos.
• Trigger notifications to designated asset owners when changes are made to security configurations and when repos are created without the required permissions.
• Automatically collect evidence of changes, issues, and remediations.

‍