Integrating Invicti Standard with Bitbucket

This document is for:

Invicti Standard

Bitbucket is a web-based hosting service for code management. It provides development teams with a place to plan projects, collaborate on code, test, and deploy. When you add a repository to Bitbucket Cloud, the issue tracker helps you track your project's feature requests, bug reports, and other project management tasks.

This topic explains how to configure Invicti Standard to send a detected vulnerability to Bitbucket.

For further information, see Configuring the User Interface for Custom Send To Actions in Invicti Standard and Configuring Auto Send To Actions in Invicti Standard and What Systems Does Invicti Integrate With?.

Before starting to integrate Bitbucket, please be sure that issue tracker is activated from the menu Repository > Select a repository > Repository settings > Issue Tracker.

Bitbucket Fields

The table lists and describes the Bitbucket fields in the Send to Actions tab.

Button/Section/Field	Description
Add	Select to add an integration.
Delete	Select to delete the integration and clear all fields.
Configure Send To	Select to configure the integration using the Settings Wizard instead of doing it manually.
Create Sample Issue	Once all relevant fields have been configured, click to create a sample issue.
Action	This section contains general fields about the Send To Action.
Display Name	This is the name of the configuration that will be shown on menus.
Mandatory	This section contains fields that must be completed.
Repository	This is the repository name, which includes the issue.
Username	This is the username in your Bitbucket account.
Password	This is the password that is used for the Bitbucket login.
Vulnerability	This section contains fields with vulnerability details.
Body Template	This is the template file to be used while rendering issue contents.
Title Format	This is the string to be used whole formatting the vulnerability title.
Optional	This section contains optional fields.
Kind	This is the type of issue: Bug Enhancement Proposal Task
Priority	This is the priority of the issue: Trivial Minor Major Critical Blocker

How to Integrate Invicti Standard with Bitbucket

Open Invicti Standard.
From the Home tab on the ribbon, select Options > Send To Actions.
From the Add drop-down, select Bitbucket.
In the Mandatory section, complete the connection details:
- Repository
- Username
- Password

In the Vulnerability section, complete Body Template and Title Format.

Body templates are stored in %userprofile%\Documents\Invicti\Resources\Send To Templates. If you use your own custom templates, store them in this location.

In the Optional settings you can specify:
- Kind
- Priority
Select Create Sample Issue to confirm that Invicti Standard can connect to the configured system and create a sample issue.

In the Send To Action dialog, select the Issue number link to open the issue in the default browser.

Select Apply or OK to save the integration.

How to Delete the Bitbucket Integration

Open Invicti Standard.
From the Home tab on the ribbon, select Options > Send to Actions.
Select Bitbucket.
Select Delete.

How to Export Reported Vulnerabilities to Projects in Bitbucket

Please ensure that you have first configured Bitbucket integration. See How to Integrate Invicti Standard with Bitbucket.

Open Invicti Standard.
From the ribbon, select the File tab. Local Scans are displayed. Double-click the relevant scan to display its results.
In the Issues panel, right-click on the vulnerability you want to export to Bitbucket and select Send to Bitbucket. (Alternatively, click the Send to Bitbucket button in the Vulnerability tab in the ribbon menu.)
Select the Bitbucket Send to Action is executed for the selected vulnerability link to see the created issue in Bitbucket.