How we made vulnerability fixes review-ready with Agentic Pipelines

This post details the implementation of agentic pipelines for automating routine vulnerability fixes in Bitbucket Cloud. It describes a workflow involving Jira Automation, a custom dispatcher and closer, Bitbucket Agentic Pipelines, Rovo Dev, and Atlassian Model Context Protocol (MCP) tools. The agentic pipeline checks for eligible tickets, groups related work, updates repositories, runs build and test suites, and opens pull requests. A 'closer' component verifies deployed fixes and updates Jira tickets. Key learnings include making instructions specific to the codebase, keeping verification deterministic and human-controlled, failing safely, and keeping access narrow and attributable. The post also introduces the beta availability of Bitbucket Agentic Pipelines.