OpenAna + Bitbucket

Code review, CI/CD pipeline analysis and security insight on Bitbucket repositories.

Live connectionSource control

Ana + Bitbucket

What Ana does with it.

Ana reads repositories, opens branches and pull requests, and follows your review rules.

01
Pull requests with tests that respect your review rules
02
Repository scanning and security insight
03
Change tracking linked to Jira

Setup

Connected in four steps.

1
Connect
Open Integrations in Ana and connect Bitbucket with a scoped token, OAuth app or service account.
2
Scope it
Start read-only and choose which projects, repositories or accounts Ana can see.
3
Set the rules
Decide which actions need approval and who approves them - Ana’s guardrails enforce it.
4
Put it to work
Ana uses Bitbucket in investigations, fixes and reports, and every action is logged.

In practice

Playbooks that use Bitbucket.

Software

Burning down a stale bug backlog

Every team has a backlog of real but low-priority bugs that never win a sprint. Ana triages them, reproduces the ones that are still real, fixes them with tests, and closes the rest with evidence.

Read the playbook →

Security

Clearing a dependency CVE backlog

Your SCA tool reports thousands of vulnerable dependencies and the number never goes down. Ana works out which are actually reachable, upgrades them safely with tests, and documents why the rest can wait.

Read the playbook →

Used by

Ana’s engineers

Software →Security →SRE / DevOps →

Governed

Every action, approved and logged.

Ana’s guardrails decide what it may do with Bitbucket, route sensitive actions to named approvers, and keep evidence for each decision. OpenAna is SOC 2 Type II, ISO 27001, HIPAA and GDPR compliant.

Guardrails →Trust center →

FAQ