How to avoid committing secrets to Bitbucket
PURPOSE
How to avoid exposing passwords, tokens, private keys, and confidential data in repositories.
GENERAL STEPS
Open Bitbucket in a supported browser, sign in with the correct work account, and navigate to the workspace, project, repository, issue, pull request, branch, pipeline, notification, or file related to the task.
VERIFY RESULTS
Confirm that the repository, issue, comment, branch, pull request, review, pipeline, file, label, or notification setting appears as expected before closing the task.
TROUBLESHOOTING
If Bitbucket behaves unexpectedly, refresh the page, confirm you are in the correct workspace or project, check your permissions, and capture any error message or access denial.
BEST PRACTICE
Do not publish secrets, passwords, tokens, private keys, customer data, or confidential information in repositories, issues, comments, pull requests, or pipeline logs.