Install Pando

Bitbucket

bitbucket Clone from Bitbucket Cloud or Bitbucket Data Center with an access token, an OAuth consumer or an SSH access key, and pick repositories from a list.

Setup

  1. Choose how Pando signs in

    Settings method, host

  2. Create a token

    1. Create one of these tokens:
      TokenWherePermission
      Cloud access tokenWorkspace, project or repository settings → Security → Access tokens → Create access tokenRepositories: Read
      Cloud API tokenAccount settings → Security → Create API token with scopes → Bitbucketread:repository:bitbucket
      Data Center HTTP access tokenManage account, Project settings or Repository settings → HTTP access tokens → Create tokenRepository read
    2. For a Cloud API token or a Data Center personal token, enter your username below.

    Open BitbucketOpen Atlassian API tokens

    Settings token_type, username, email, token · Only when method is token

  3. Add an OAuth consumer

    1. In the workspace, open Settings → Workspace settings → OAuth consumers → Add consumer.
    2. Enter a Name. Set Callback URL to your Pando address plus /api/v1/sources/callback.
    3. Under Permissions, check Repositories Read and choose Save.
    4. Choose the consumer's name and copy its Key and Secret.

    Open workspaces

    Settings client_id, client_secret · Only when method is oauth

  4. Add an access key

    1. Run ssh-keygen -t ed25519 -f pando-access -N "".
    2. On Bitbucket Cloud, open Repository settings → Access keys → Add key. Enter a Label, paste pando-access.pub into Key and save it.
    3. On Data Center, open the project's or repository's Settings → Access keys → Add key. Paste pando-access.pub, choose Read and choose Add key.
    4. Paste pando-access below.
    5. Run ssh-keyscan bitbucket.org, or ssh-keyscan -p 7999 HOST for Data Center, and paste its output below.

    Settings ssh_private_key, ssh_passphrase, known_hosts · Only when method is ssh

  5. Choose a workspace or project

    Settings scope

Settings (15)
methodHow Pando signs inRequired
  • token Access token — Bitbucket Cloud: a workspace, project or repository access token, or an API token. Data Center: an HTTP access token.
  • oauth OAuth consumer — A person authorizes Pando in the browser. Bitbucket Cloud only.
  • ssh SSH access key — A key added to a repository or project as an access key. Repositories are entered by address.

one of the values above · Default token

hostHost

The host repositories are on. Change it for a self-managed server.

string · Default bitbucket.org

scopeWorkspace or project

Bitbucket Cloud: the workspace ID, such as acme. Data Center: the project key, such as PAY. Empty is every repository the credential can read.

string · For example acme

token_typeToken type

Bitbucket Cloud only. Data Center takes an HTTP access token whichever is chosen.

  • access_token Access token — A workspace, project or repository access token.
  • api_token API token — An Atlassian account's API token, with your Bitbucket username.

one of the values above · Default access_token · Used when method is token

usernameUsername

Your username, for a Cloud API token or a Data Center personal token. Empty is x-token-auth.

string · For example alice · Used when method is token

emailAtlassian account email

Cloud API token only. Empty is the username.

string · For example [email protected] · Used when method is token

tokenTokenCredential

Read access to repositories is enough.

string · Used when method is token

client_idOAuth consumer key

The Key from Workspace settings → OAuth consumers.

string · Used when method is oauth

client_secretOAuth consumer secretCredential

The Secret shown beside the Key.

string · Used when method is oauth

ssh_private_keySSH private keyCredential

The private half of a deploy key or access key added to the repository. Pando reads the repository with it and never writes.

string · Used when method is ssh

ssh_passphraseKey passphraseCredential

Only if the key has one.

string · Used when method is ssh

known_hostsKnown hosts

The host's public key, as ssh-keyscan bitbucket.org prints it. For Data Center, ssh-keyscan -p 7999 HOST, whose lines begin [HOST]:7999.

string · Used when method is ssh

ssh_portSSH portAdvanced

Bitbucket Data Center's SSH port, for turning an HTTPS address into an SSH one. Not used on Bitbucket Cloud.

string · Default 7999 · Used when method is ssh

api_urlAPI addressAdvanced

Where the host's API is, if not where Pando would look for it.

string · Default https://api.bitbucket.org/2.0 on Bitbucket Cloud, https://HOST/rest/api/1.0 on Data Center

ca_bundleCertificate authorityAdvanced

PEM certificates to trust for a self-managed host on a private certificate authority, beside the system's.

string · Default The system's trusted certificates