Users may integrate Black Duck scanning software with Bitbucket workflows in the following two ways:
Black Duck Security App is recommended for most users, enabling the configuration of scans for Coverity, Black Duck® SCA or Polaris through an intuitive web interface. Based on the user's selected configuration options within the Bitbucket App, a workflow will be generated that will perform a scan for Coverity, Black Duck® SCA and Polaris. Users can use the app to review, edit and deploy the workflow to selected repositories within their organization.
Black Duck Security Scan is a Bitbucket Pipe that allows users to manually configure workflow files for single repositories.