More control over permissions in Bitbucket Pipelines: new features and upcoming changes

Bitbucket Pipelines is rolling out granular step-level permissions and short-lived container tokens to replace long-lived credentials and broad default access. Admins can now let specific pipeline source branches push to restricted branches, removing the need for bot users on exemption lists. A new BITBUCKET_OAUTH_TOKEN gives each step a short-lived, container-isolated token scoped to what you declare. New dedicated scopes, read:git:bitbucket and write:git:bitbucket, cover git operations without full repository API access. Breaking changes land on Oct 28 2026 (pipeline:write required for the Run a pipeline API), Nov 30 2026 (workspace-user branch exemptions stop working), and Apr 30 2027 (steps without an auth block lose broad default scopes). Self-hosted runners need version 6.1.0 or later.

Source: https://www.atlassian.com/blog/bitbucket/more-control-over-permissions-in-bitbucket-pipelines-new-features-and-upcoming-changes. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.

Recommended for you

C# Corner1 Hot15 min7 h ago

Comparing NL2SQL Tools That Integrate with MCP Clients

Compares MCP-capable NL2SQL tools by their question-versus-SQL contracts, security boundaries, authentication, and authorization for database access.

#security#ai-agent#mcpSource

freeCodeCamp234 Hot2 min9 d ago

Learn Real-World Penetration Testing: Hands-On Ethical Hacking Crash Course

Understanding how malicious actors infiltrate networks is the first step to building resilient infrastructure. To help developers and aspiring security analysts learn the fundamentals of offensive sec

#security#cyber#linuxSource

Hacker News1 Hot12 min1 d ago

Firecracker VM Escape: PwnEscape Part 2

A malicious guest crossed Firecracker's microVM boundary, resolved the live VMM from inside the VM, and took control of a root-run host process—turning a Linux networking flaw into a guest-to-host code-execution primitive.

#security#firecrackerSource

Currents2 Hot21 min1 d ago

Agentic E2E Testing with Playwright: What Holds Up in CI

Agentic E2E testing with Playwright in CI: where each agent runs, a merge gate no model touches, repair from real failures, and token budgets.

#ai-agent#testing#cicdSource

Socket1 Hot16 min1 d ago

Shai-Hulud Descendant Surfaces in Malicious Ruby Gem That Steals Credentials and Poisons AI Tools

A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

#security#ai-coding#malwareSource

AWS1 Hot4 min1 d ago

Your Guide to the Developer Tools Track at AWS re:Invent 2026

AWS re:Invent 2026's Developer Tools track focuses heavily on agentic development, centered on AWS's Kiro AI coding agent. The track offers 46 sessions, with about three-quarters interactive, covering CI/CD, infrastructure as code, full-stack development, and multi-agent workflows. Highlighted sessions include DVT204 on scaling Kiro across enterprises, DVT405 on Kiro validating specs before coding, and DVT406, a 400-level workshop on autonomous development with the Kiro CLI. Attendees can also try Kiro Galaxy Run, a VR space mission experience, and visit Kiro demos at the AWS Village, Builder Zone, and Ctrl+Alt+Ship self-paced labs.

#aws#ai-agent#cicdSource

Medium56 Hot5 min6 d agoTop

I built a Software Factory

I built a Software Factory Last year I caught myself doing something absurd. I was paying for the best coding models money could buy, and I was still the bottleneck. Not because the models were slow …

#ai-agent#cicd#vibe-codingSource

Cyble1 Hot12 min1 d ago

Rogue AI Agents: You Might Be Someone Else's AI Test Environment

Rogue AI agents hit Hugging Face, a U.S. Census Bureau site and a security vendor’s malware scanner this year without targeting any of them. Third-party risk programs have no line for that.

#security#ai-agentSource