Skip to content

Buildkite

The Buildkite Integration provides SailPoint Entro with continuous, read-only visibility into build log output across your Buildkite pipelines. Once connected, Entro scans job and build logs for secrets accidentally printed during pipeline execution — such as API keys, tokens, and credentials echoed in build steps and alerts on exposures before they can be exploited.

Architecture

┌───────────────────────────────────┐
│ SailPoint Entro Security Cloud    │
│  (Secret Detection Engine)        │
└──────────────┬────────────────────┘
               │  HTTPS (TLS 1.2+)
               ▼
┌───────────────────────────────┐
│       Buildkite Cloud         │
│ (Pipelines, Builds, Secrets)  │
└───────────────────────────────┘

SailPoint Entro connects to Buildkite through a Personal Access Token (PAT) with read-only permissions.

Security and Compliance

  • All connections occur over HTTPS/TLS 1.2+

  • Access tokens are AES-256 encrypted at rest within Entro

  • No write, modification, or destructive actions are performed

  • Tokens can be revoked anytime from the Buildkite user settings

  • Full audit logging available in Entro’s event logs