youngmon/atlassian-qna huggingface dataset:
Log4shell vulnerability?
Asked by Duncan Pierce:

Hi,

Has Bitbucket (or any of the other Atlassian products required to use it) been affected by the recent "log4shell" vulnerability in Log4J?

Thanks for your help!


Answers:
author: Daniel Eads
body: Hi all,

Daniel with Atlassian Support here to let you know our security team has finished its investigation. [We have an official response statement here on Community, which you can access at this link.](https://community.atlassian.com/t5/Trust-Security-articles/Atlassian-s-Response-to-Log4j-CVE-2021-44228/ba-p/1886598#M134)

More information can be found on our advisory page, as well as the previously-published FAQ:

* <https://confluence.atlassian.com/display/SECURITY/Multiple+Products+Security+Advisory+-+Log4j+Vulnerable+To+Remote+Code+Execution+-+CVE-2021-44228>
* <https://confluence.atlassian.com/kb/faq-for-cve-2021-44228-1103069406.html>

Thanks,  
Daniel Eads \| Atlassian Support


author: Nikki Zavadska [Appfire]
body: Hi, you can find FAQs and Atlassian recommendations and updates related to Log4J here ? <https://confluence.atlassian.com/kb/faq-for-cve-2021-44228-1103069406.html>

comments: author: Nikki Zavadska [Appfire]
body: "You can check if you are vulnerable by inspecting the Log4j configuration file. If you find a line containing the `org.apache.log4j.net.JMSAppender`, you may be vulnerable. If you do not find a line containing the `org.apache.log4j.net.JMSAppender`, you do not have this specific vulnerable configuration."


author: Nikki Zavadska [Appfire]
body: ??above is information for data-centre and server

In terms of Cloud there is a mention in FAQ that Atlassian security team is investigating the impact on Cloud but nothing specific is mentioned there yet.


author: Alex Young
body: ElasticSearch in our BitBucket has the affected JAR files

![Screenshot 2021-12-13 111432.png](https://community.atlassian.com/t5/image/serverpage/image-id/173621i7FC0FE1DE72209D0/image-size/large?v=v2&px=999 "Screenshot 2021-12-13 111432.png")

But Atlassian are saying Bitbucket is not affected?

Whats the deal please?


author: ltoinel
body: Hi, My Confluence instance used for an Opensource project has been hacked since the 22th November.

* A cryptojacker installed a /tmp/.solr/solrd process to mine cryptomoney.
* A new attack has been detected the 5th december. A ransomware crypted the data of my confluence database.  

  Take care of your instances publicly available from Internet !


Tags: bitbucket-cloud

cloud

cve-2021-44228
android building failed on bitbucket pipeline during lintVital
Asked by Aaron_???:

Recently, I configured Bitbucket Pipeline to build the android apk.

Here is the \`bitbucket-pipelines.yml\`

\`\`\`  
pipelines:  
custom:  
QA:  
- step:  
name: Test Release  
size: 2x  
caches:  
- gradle  
script:  
- echo "$KEYSTORE_FILE_BASE64" \| base64 -d \> android-signing-keystore.jks  
- export GRADLE_OPTS='-XX:+UseG1GC -XX:MaxGCPauseMillis=1000 -Dorg.gradle.jvmargs="-Xmx2048m -XX:MaxPermSize=1024m -XX:ReservedCodeCacheSize=440m -XX:+UseCompressedOops -XX:+HeapDumpOnOutOfMemoryError -Dfile.encoding=UTF-8" -Dorg.gradle.parallel=false -Dorg.gradle.daemon=false -Dorg.gradle.configureondemand=true'  
- ./gradlew clean assembleStageRelease appDistributionUploadStageRelease  
\`\`\`

Actually, it worked fine before.  
But the building had been failing from last week.

Here is the error log.

\`\`\`  
\> Task :app:lintVitalStageRelease FAILED  
FAILURE: Build failed with an exception.  
\* What went wrong:  
Execution failed for task ':app:lintVitalStageRelease'.  
\> Could not resolve all files for configuration ':app:lintClassPath'.  
\> Could not download groovy-all-2.4.15.jar (org.codehaus.groovy:groovy-all:2.4.15)  
\> Could not get resource '<https://jcenter.bintray.com/org/codehaus/groovy/groovy-all/2.4.15/groovy-all-2.4.15.jar>'.  
\> Could not GET '<https://jcenter.bintray.com/org/codehaus/groovy/groovy-all/2.4.15/groovy-all-2.4.15.jar>'.  
\> Connection reset  
\`\`\`

If I run the command on my local machine, it works fine now...  
\`\`\`  
\> ./gradlew clean assembleStageRelease appDistributionUploadStageRelease  
\`\`\`

What problem??

-----

I updated the \`build.gradle\`.

Before:  
\`\`\`  
repositories {  
google()  
jcenter()  
}  
\`\`\`

After:  
\`\`\`  
repositories {  
google()  
mavenCentral()  
jcenter()  
}  
\`\`\`

But it same results...

\`\`\`  
\* What went wrong:  
Execution failed for task ':spooncast:lintVitalStageRelease'.  
\> Could not resolve all files for configuration ':spooncast:lintClassPath'.  
\> Could not download groovy-all-2.4.15.jar (org.codehaus.groovy:groovy-all:2.4.15)  
\> Could not get resource '<https://repo.maven.apache.org/maven2/org/codehaus/groovy/groovy-all/2.4.15/groovy-all-2.4.15.jar>'.  
\> Could not GET '<https://repo.maven.apache.org/maven2/org/codehaus/groovy/groovy-all/2.4.15/groovy-all-2.4.15.jar>'.  
\> Connection reset  
\`\`\`


Answers:
author: Theodora Boudale
body: Hi Aaron,

I just wanted to leave a note to say that I replied on Wednesday to the other post you created about this issue:

* <https://community.atlassian.com/t5/Bitbucket-Pipelines-questions/Build-failed-jcenter-download/qaq-p/1886702>

If you have any questions, please feel free to let me know in the other post or reach out via a support ticket.

Kind regards,  
Theodora


Tags: android

bitbucket-pipelines

cloud
install step in pipeline
Asked by Sergey Kurchatov:

Hello,

I am new for pipelines so excuse me if the question is obvious

In my build I have two steps:

1. **Install VTK library**. This is a long-time step but it needs to be run \~once a year

2. **make myVTKapp**. This is a quick step needs to be run several times a day (per each commit into the repo), but it is requires pre-installed VTK library

So how to do this with the pipeline without re-installing VTK each time?

Regards,

Sergey


Answers:
author: Jimmy Seddon
body: Hi [@Sergey Kurchatov](/t5/user/viewprofilepage/user-id/4670309),

Welcome to the Community!

This is going to depend on things about your environment. The short version is that you really shouldn't do this as your build pipeline will work best when all of the steps can be run on every single build for consistency sake.

However, if you need to have the "Install VTK Library" step run but not as often, you are going to need to provide the agent machines the build will be performed on using:

[Bitbucket Pipelines Runners](https://support.atlassian.com/bitbucket-cloud/docs/runners/)

You will setup the Install VTK Library to execute against the agent infrastructure you provide. Then you setup another build pipeline that runs just the make myVTKApp and is only executed by the agents that you have setup with Runners.

I hope that helps!

-Jimmy

comments: author: Sergey Kurchatov
body: Thank you [Jimmy Seddon](https://community.atlassian.com/t5/user/viewprofilepage/user-id/512822)!

I will try.

Sergey


Tags: bitbucket-pipelines

cloud
how do i create new repository in bitbucket by using git bash
Asked by Akshay Kadam:

how do i create new repository in bitbucket by using git bash terminal


Answers:
author: Jimmy Seddon
body: Hi [@Akshay Kadam](/t5/user/viewprofilepage/user-id/4668928)!

Welcome to the Community!

I'm going to assume the reason you are asking this is that you don't have access to the Web interface to create the repository (which is the normal way you would do this).

From git bash your only option would be to create a script that uses the API to create the repo. You can find the documentation for that here:

<https://developer.atlassian.com/cloud/bitbucket/rest/api-group-repositories/#api-repositories-workspace-repo-slug-post>

I hope that helps!

-Jimmy


Tags: bitbucket-cloud

cloud
can we deploy from Stage to Prod with the help of Build number?
Asked by koti r:

Any possibility to deploy from a Stage environment to Production environment Only by using the build number?, In our case we have 20 lambdas to be deployed. we are using "condtion, changesets" of Bitbucket pipelines to build a changed lambda only. Any possibility to configure the same "Deployment Environment" in multiple times . Please let us know. Thank you.


Answers:
author: Norbert C
body: Hi Koti,

Thank you for contacting Atlassian Community! I'm Norbert from Bitbucket Cloud Support, it's nice to meet you!

Unfortunately the functionality what you're looking for is not available. What I would like to suggest you is to open the build which you'd like to deploy and click on the "Redeploy" button, which is associated with your Prod environment.

Please let us know if you have any further question?

Best Regards,  
Norbert  
Atlassian Bitbucket Cloud Support

comments: author: koti r
body: Hi Norbert C,

Thanks for your reply. I have one more query like, we have swagger file for API GATEWAY Deployments, the same should be used for DEV, TEST and PROD Environments. We will be having two Bitbucket branches for DEV and TEST environments only. How we can deploy to PROD from TEST. We have 18 lambdas to deploy and we are using conditions/changesets to deploy the changed code only. Please specify anyway to pass deployment variables.


Tags: bitbucket-pipelines
Bitbucket Pipelines
Asked by Felipe Ardila:

I put the specific file path but it tells me that the file does not exist

![Captura de pantalla (25).png](https://community.atlassian.com/t5/image/serverpage/image-id/173444iCF454D99DF11829F/image-size/large?v=v2&px=999 "Captura de pantalla (25).png")


Answers:
author: Jimmy Seddon
body: Hi [@Felipe Ardila](/t5/user/viewprofilepage/user-id/4669803),

Welcome to the Community!

Can you please provide a bit more detail about what you are trying to accomplish as well as what is currently running?

From the image all I can make out is that it "looks" like you are trying to run the "List Download Artifacts" based on the API call listed:

<https://developer.atlassian.com/cloud/bitbucket/rest/api-group-downloads/#api-repositories-workspace-repo-slug-downloads-get>

From what you have indicated, the specific file doesn't exist. Is it possible that is a true statement? It looks like that should be created as a part of building the debug version of your apk file, but I don't see any steps that indicate you have attempted to build the apk yet.

I hope that helps!

-Jimmy


Tags: bitbucket-cloud

cloud
Unable to pull or Push
Asked by George Karpouzas:

I cannot pull an existing repository from my workspace or push any changes back to the server. This is happening only today (11/12/2021). Nothing has changed for my 16 repositories. I have also checked my ssh keys etc.


Answers:
author: Caroline R
body: Hi, [@George Karpouzas](/t5/user/viewprofilepage/user-id/783129)!

Thank you for reaching out to Atlassian Community!

Could you please run your git command using the verbose mode, so we can see what's happening during this process? You just need to add the flag **-v** to the end of your command:

```
git push -v
```

Also, you mentioned your ssh, so I understand you are trying to authenticate using this protocol. Could you please change your URL and test this using HTTPS to confirm if you face the same issue? You can change your URL by running this command:

```
git remote set-url origin https://<your_username>@bitbucket.org/<workspace_ID>/<repo_name>.git 
```

And could you please confirm if this is affecting just one repository?

Thank you. Looking forward to hearing from you.

Kind regards,  
Caroline


author: George Karpouzas
body: There are no errors appearing in the terminal while I am executing the following commands, they just last forever, they are never getting completed.

**git push origin develop**

and

**git pull origin develop**


Tags: bitbucket-cloud

cloud

pull-request

push
Problem while creating "issue"
Asked by Timofey Teterin:

Hello! When creating a issue and assigning a person responsible for solving it, I can't find a teammate in the list (I enter everything correctly). One immediately shows with the tag "teammate". There is no second one. However, it outputs a lot of other users.


Answers:
author: Theodora Boudale
body: Hi [@Timofey Teterin](/t5/user/viewprofilepage/user-id/4669831),

I can see in our system a Bitbucket Cloud account with the same email as your community account, the workspace associated with your user has some public repos.

1. Could you please confirm if the issue is occurring with one of these public repos?
2. If so, is the issue tracker public as well?
3. I see two users with access to these repos.  
   One of the users seems to have as Full Name both first and last name, while the second user has as Full Name only a first name (I am not mentioning the actual names for privacy reasons).  
   Could you please let me know which of the two you have trouble adding as an assignee?

Kind regards,  
Theodora

comments: author: Timofey Teterin
body: ++You all assume correctly. There is a problem with a user whose first name is written without a last name.++

*** ** * ** ***


author: Theodora Boudale
body: Hi [@Timofey Teterin](/t5/user/viewprofilepage/user-id/4669831),

Thank you for your reply. I've triggered a sync between our systems for this user and repositories, could you please give it another try now and let me know if you can find the user when you type their name in the Assignee field?

If the issue persists, could you please clarify if you see other users for the name you type, but not your teammate?

Kind regards,  
Theodora


author: Timofey Teterin
body: All its working now. Thank you so much!


author: Theodora Boudale
body: That's good to hear, thank you for the update!

Please feel free to reach out if you ever need anything else!

Kind regards,  
Theodora


author: Fabian Lim
body: Hi [@Timofey Teterin](/t5/user/viewprofilepage/user-id/4669831)

Welcome to the community.

If the user cannot be found is possible that the permissions to be an assignable user has not be set properly. Link: <https://confluence.atlassian.com/adminjiraserver/managing-project-permissions-938847145.html>

Someone such as a project admin or sys admin can assist.

Also make sure that the user has a jira license.

Regards

comments: author: Timofey Teterin
body: We are not working in jira. The user I want to assign is also the repository administrator.


author: Timofey Teterin
body: It worked once. In the rest, it simply does not find the necessary one in the array of all users.


author: Fabian Lim
body: My bad. I thought this was jira related.
How do I restart failed builds?
Asked by Evgeny Vinnik:

How would I restart failed builds on the Bitbucket pull request UI?  

We have a system where our pull requests go through [TeamCity CI/CD](https://www.jetbrains.com/teamcity/)  

We have couple flaky unit tests that turn green after several retries.

![2021-12-10 10_27_12-insightly _ core _ Pull Request #23956_ EN-43150_ EN-43072 Invalid Chart error f.png](/t5/image/serverpage/image-id/173362i31FC147E80E07B49/image-dimensions/354x448?v=v2 "2021-12-10 10_27_12-insightly _ core _ Pull Request #23956_ EN-43150_ EN-43072 Invalid Chart error f.png")

How would I restart those builds?  

So far I was relying on resyncing my development branch with the main one, which re-triggers the build.  
My colleagues also advised me to push an empty update onto the development branch, but really what I want is to find a button of sorts on the UI to restart the build.  


Answers:
author: Norbert C
body: Hi Evgeny,

Thank you for contacting Atlassian Community! I'm Norbert from Bitbucket Cloud Support, it's nice to meet you! Also, welcome to the Atlassian Community :)

I'd like to inform you that how CI/CD tools work is that Bitbucket Cloud is sending a Webhook event and once this Webhook payload is received by your CI/CD instance, the build is getting triggered.

Unfortunately we don't have the functionality to trigger a manual Webhook payload.

Currently we have a feature request for this as you can see in the link below:

\* [BCLOUD-20539 - As a customer, I want to be able to manually trigger a webhook](https://jira.atlassian.com/browse/BCLOUD-20539)

Our development team will give a first-hand update on that ticket if there's any progress made so I would suggest keeping a watch and vote for it.

Do note however that there's no ETA on enhancement request, and all enhancements are implemented with this policy in mind: [Implementation of New Features Policy](https://confluence.atlassian.com/support/implementation-of-new-features-policy-201294576.html)

For now the only workaround which I can think of is to create a commit in the PR, which triggers a Webhook event and sent to your CI/CD tool.

Please let us know if you have any further question?

Best Regards,

Norbert  
Atlassian Bitbucket Cloud Support


Tags: atl-gruland

bitbucket-cloud

build

cloud

teamcity
Syncing two feature branches with a post-commit hook
Asked by sandip:

I'd like to sync two feature branches on the Bitbucket Cloud with a post-commit hook (using rebase). I could not find how to do that in Bitbucket.


Answers:
author: Syahrul
body: Hi [@sandip](/t5/user/viewprofilepage/user-id/4170818)

<br />

G'day!

Currently, Bitbucket does not support post-commit-hook but it's possible to do it locally as per our documentation [Git hooks](https://www.atlassian.com/git/tutorials/git-hooks). It's not possible to enforce it on the Bitbucket level, but you can enforce it on the local machine, the downside is that you have to manually configure this on each developer machine.

We do have an open feature request to implement this in the future though, which you can find here:

* <https://jira.atlassian.com/browse/BCLOUD-10471>

Cheers,  
Syahrul

comments: author: sandip
body: Hi Syahrul,

Thanks for the answer!

I'm just curious if its possible to do this using git directly on the Bitbucket Cloud server? The Bitbucket support you mentioned would essentially just be a wrapper around the core git functionality, correct?

Thanks,

Sandip


Tags: bitbucket-cloud

branch

cloud

commit

git

sync
Bitbucket website is failing for me but status says it's fine
Asked by seanmk:

As of 11:22 am CET on Friday December 10 I am only getting errors when I try to view my repositories or the contents of git. However, the Bitbucket status page says reports "operational" and green, which I assume means there are no problems. It does not seem there is a way to actually report an error without a paid account. Is this happening for others?


Answers:
author: seanmk
body: I figured out that the AdGuard Ad blocker was blocking requests for things like repositories from the website. Disabling the ad blocker fixes the problem!

comments: author: OTSU
body: I have no adblocker enabled and the website is still unreachable for me. Also, I'm unable to make any pull requests from my repository.

edit: im up and running.


Tags: bitbucket-cloud

cloud
How to block the repositories creation
Asked by Gregory ANNE:

I want to avoid my team can create some repository under some project, because they dont use correctly the right management and they don't setup them correctly. So does it possible to block repository creation in a projet or in the entire organisation ?


Answers:
author: Claudio Gonzalez
body: Hi [@Gregory ANNE](/t5/user/viewprofilepage/user-id/3573754) ,

Into workspace settings you need selected "Users Group" menu. You need find "Admin" group. All users in this section can create repositories inside this workspaces and projects.

![Screen Shot 2021-12-10 at 12.17.20.png](https://community.atlassian.com/t5/image/serverpage/image-id/173339i39BF0AEA733D14DF/image-size/large?v=v2&px=999 "Screen Shot 2021-12-10 at 12.17.20.png")

Any other group, when you was created should have this options unselected.

![Screen Shot 2021-12-10 at 12.19.23.png](https://community.atlassian.com/t5/image/serverpage/image-id/173340i0EF213832B297623/image-size/large?v=v2&px=999 "Screen Shot 2021-12-10 at 12.19.23.png")

comments: author: Gregory ANNE
body: Thanks for you reply, effectively I have configured incorrectly a group, my fault.


Tags: bitbucket-cloud

cloud
ssh
Asked by sistem_yoneticileri:

    cd existing-projectgit remote set-url origin https://isdbitbucket/scm/bays/test.git - here before when I created a new repo it was ssh but it turned to https what should I do

     
    git push -u origin --all git push origin --tags


Answers:
author: Nick Stone
body: If you want to be working with SSH you're going to need to make sure you have some SSH key pair(s) in your local device. Usually here--- C:\\.ssh/ with /id_rsa and id_rsa.pub take and if needed generate better keys prior to adding to Bitbucket settings SSH Keys. You can use about anything. Cmd, Terminal, to ssh-keygen generate keys and you'll want to sign into Bitbucket/Github/Your Hosting Provider and add your public key, NOT your private.   

SSH will not work if it doesn't recognize or match up to the private key's values in the id_rsa folder which you don't need to mess with.   

If you want to SSH into a computer address use Bitvise or Putty on Windows or ssh username@ip_address to ssh into. Often times root@mywebsite.com   

But if you're on your own machine and using thing like Non-Ubuntu Linux Builds it could very somewhat, I just speak for Windows some, Mac mostly, and Linux enough to help a bit. You can change the format you clone folders i.e. the ssh way instead of the https way, it's the 3 tab menu after clicking Clone in the repo. Https requires password unless saved and configured on local computer, and SSH maybe overkill. Let me know what you're wanting to do and I'll try to better answer.
Clear Case to bitbucket Migration
Asked by Sanket Sutar:

Hello All.

I have some VOB on ClearCase, I want to migrate those VOB to bitbucket.

I want to migrate those VOB with all labels and history.

What should be the approach???

Suggestions will be welcome.


Answers:
author: Caroline R
body: Hi, [@Sanket Sutar](/t5/user/viewprofilepage/user-id/4668432)! Welcome to the community!

The first thing you'll need to do is to migrate from ClearCase to Git. Once the migration is done, you can import the repo to Bitbucket and the history should be imported as well. Could you please clarify if by labels, do you mean tags?

In any case, the first step should be to migrate repositories to git. See this community question for more details:

* <https://community.atlassian.com/t5/Answers-Developer-Questions/How-to-migrate-clearcase-to-GIT-with-history/qaq-p/556047>
* <https://community.atlassian.com/t5/Bitbucket-questions/Migration-From-ClearCase-to-Git/qaq-p/1261208>

After that, you can import your repository using the import tool by accessing your workspace \> Select **Create repository** \> Go to **Import repository** \> fill in the required fields and click **Import repository**.

I hope this helps, but do let me know if you have any questions.

Kind regards,  
Caroline

comments: author: Sanket Sutar
body: Hey [@Caroline R](/t5/user/viewprofilepage/user-id/3934006) Thanks for the answer.

let me follow the above steps, If any query occurs I will let you know.


author: Mohammed Afzal L
body: Hi [@Sanket Sutar](/t5/user/viewprofilepage/user-id/4668432) ,  
did u follow the above steps ?  

If you were able to successfully migrate from CC to Git, Could you please share the process with required commands to achieve migration.  


Tags: bitbucket-cloud

clearcase

cloud