Skip to content

Zero Touch Provisioning for Bitbucket


This guide walks you through the process of setting up ZTP for Bitbucket.


Prerequisites


Before you begin, ensure you have:

  • Integrated Bitbucket to Boost Security.
  • Repository admin permission for your Atlassian account on the repositories of every Bitbucket project selected for Zero Touch Provisioning. Granting the Admin permission on a project gives admin permission on all the repositories in that project. See Configure project permissions for users and groups in the Bitbucket documentation.
  • Created a non-empty .boost repo in the Bitbucket workspace.
  • Turned on the Enable Pipelines settings for your workspaces' .boost repository. You can do this by clicking the Enable Pipelines button.

Enable Pipelines


Integration Steps


  1. Go to the Integrations page, select your Bitbucket integration, and click on the configuration tab.

  2. On the ZTP column, you will notice that the ZTP status is set to Not Set. Click on the actions menu next to the status and select Enable.

    Enable ZTP

  3. On the Give Boost permissions for the Zero Touch flow step, no additional permissions are required. Select Skip initial scan after provisioning if you don't want repositories to be scanned right after provisioning, then click Next.

    Give Boost permissions for the Zero Touch flow

  4. On the Configure the Boost Repository step, pick where the Boost Security scans pipeline runs. The default is use .boost repository from the same organization. Click Select And Continue.

    Configure the Boost Repository

  5. On the Display Pipeline Configuration step, you are redirected to Atlassian to authorize the pipeline configuration.

    Display Pipeline Configuration

  6. Sign in with your Atlassian account if prompted. Atlassian displays the access that BoostSecurity CI Provisioning requests on your Atlassian account: access to your repositories' build pipelines and their variables, and read and modify access to your pull requests and repositories. Click Accept.

    BoostSecurity CI Provisioning authorization

  7. You are returned to Boost Security, which configures the pipeline in the .boost repository. The wizard displays Zero Touch Provisioning is now enabled! Click Enable Boost Recommended Scanners, or Go to Scanner Coverage page to start adding scanners to provision scanners yourself.

    Zero Touch Provisioning enabled