Install Mend Developer Platform for Bitbucket Cloud

Overview

In this article, you will find step-by-step instructions for installing the Mend Developer Platform for Bitbucket Cloud.

Getting it done

Prerequisites

• Access to a Bitbucket workspace and a user with Admin privileges

• Mend Account with SCA/SAST entitlement on the Mend Platform

• Admin Access to Mend Platform to generate Activation Key

• If your workspace has conditional access to certain IP addresses, add the following IPs to your allowlist:

  • saas.mend.io customers -
    35.169.49.18
    34.239.12.110
    35.169.49.18
    52.45.235.219
    34.193.161.106
    52.0.106.131
    34.197.147.244
    54.243.119.210
    98.82.39.166
    107.20.215.6
    44.206.201.73

  • saas-eu.mend.io customers -
    52.31.29.228

Notes:

• The prerequisites are not required to use Renovate within the Mend Developer Platform for Bitbucket Cloud.

• You should have access to the Mend Platform only if you wish to unlock all the premium features, such as SCA and SAST. If you solely intend to utilize Renovate, there is no need to create a Mend account.

• A GitHub.com token is recommended for running scans. Without it, GitHub release notes won’t be retrieved, which will result in a warning message.

Installing Mend Developer Platform for Bitbucket Cloud

1. Log in to the Mend Developer Portal and authorize with your Bitbucket Cloud user.

2. Click on “Go to Bitbucket” and select the workspace where the app should be installed.

   

3. Navigate to Integrations under the Settings toggle within the Mend Platform, then select the Bitbucket Cloud integration.

   

4. Click on Install to Bitbucket Cloud (1) to navigate to https://developer.mend.io/ to install the Mend Developer Platform in your Bitbucket Cloud workspace.

   

5. After installing the Mend Developer Platform Bitbucket Cloud App, you will see your workspace available in the Mend Developer Platform:

   

Note: You can integrate multiple BB workspaces with 1 Mend organization. Click “Install more” to onboard additional workspaces to your Mend Developer Platform App.

6. Click on the workspace for which you would like to install the Mend App.

7. The Setup Wizard will be shown to you, where two product options are going to be presented:
   (1) Renovate only. Automatic updates for open-source dependencies.
   (2) Mend Application Security (Mend license is required). Including Renovate, Open Source Security (Mend SCA), and Code Security (Mend SAST).

   

8. To install the Mend Application Security, select this option and navigate to the Mend Platform to copy the Activation Key (as described in step #4). Then, paste the Mend Activation Key to connect your Bitbucket workspace with your paid Mend account.

   

9. Click CONNECT WORKSPACE, and then CONTINUE. You’ll see the name of the Mend Organization to which your workspace is now connected.

10. Now you have the option to activate the Mend App for all repositories or only selected ones. Select your preference, and then click CONTINUE.

    

During the installation process, please note that the Mend Developer Platform app is installed for the entire workspace. This means that it will have access to all repositories within the workspace, regardless of the repositories selected during installation.
The purpose of selecting repositories at this step is to define which repositories will have the available engines enabled and activated.

11. Choose the scan behavior of the installed Mend App. You can choose one of these two options:
    (1) Scan only. Selected repositories will be scanned without checks, issues, and PRs being created. Scan results will still be available in the Developer Portal and Mend App.
    (2) Scan and alert. Selected repositories will be scanned with scan results presented in checks, issues, and PRs.

    

Create a branch restriction in Bitbucket Cloud using Mend checks

To create a Bitbucket Project branch restriction that will block pull requests to the default branch of each repository when the Mend check fails (using the default Mend configuration):

1. Within Bitbucket, select Projects on the top navigation bar to access the projects within the workspace.

   

2. Select the Project in which you want to add branch restrictions.

3. Select Project Settings on the left navigation sidebar.

   

4. Select Branch restrictions on the left navigation sidebar.

   

5. Select Add a branch restriction.

   

6. Select the Merge settings tab.

7. Check the following box ‘Minimum number of successful builds for the last commit with no failed builds <number> and no in progress builds' - please set 'number’ to your company policy.

   

8. Click Save.