Third-party secrets are now supported in Bitbucket Pipelines
Dec 4, 2024Shirley Zhou

Summary
This post introduces the capability for Bitbucket Pipelines to integrate with third-party secret stores. It details the mechanism involving OIDC tokens, runner requests, OIDC validation, and secret fetching/filtering. It also provides configuration instructions for self-hosted and cloud runners, and outlines the requirements for enabling OIDC in pipeline configurations. A demo secret provider integration is referenced for guidance.