Atlassian Forge

SailPoint Entro enables security teams to enforce secret leakage prevention in BitBucket using an Atlassian Forge app. By installing the app, you will be able to enforce a merge check that will detect exposed secrets in PRs and prevent their merging.

To set up the app, you will need to install it into your BitBucket workspace and enable it through the custom merge checks.

After installing and enabling the app, SailPoint Entro will start enforcing the 0-secrets exposed policy in your PRs. Detailing which secrets exposed and where.

Note

Requiring all checks to pass is an Atlassian BitBucket premium feature

Once installed, you will need to set up a SailPoint Entro API key using the forge cli

forge variables set --encrypt ENTRO_API_KEY api_key_value
# Forge required re-deployment after variables change
forge deploy

To install the app, please reach out to the SailPoint Entro team for an installation link.