Skip to content

Commit 9f5df61

Browse files
authored
Assistant for ADO and Bitbucket (#1941)
1 parent d6b8c27 commit 9f5df61

File tree

2 files changed

+30
-0
lines changed

2 files changed

+30
-0
lines changed

docs/semgrep-assistant/getting-started.md

+28
Original file line numberDiff line numberDiff line change
@@ -23,11 +23,39 @@ This article walks you through enabling Semgrep Assistant for your deployment an
2323
<Tabs
2424
defaultValue="github"
2525
values={[
26+
{label: 'Azure DevOps Cloud', value: 'ado'},
27+
{label: 'Bitbucket Cloud', value: 'bitbucket'},
2628
{label: 'GitHub', value: 'github'},
2729
{label: 'GitLab', value: 'gitlab'},
2830
]}
2931
>
3032
33+
<TabItem value='ado'>
34+
35+
Semgrep Assistant extends standard Semgrep capabilities by providing contextually aware AI-generated suggestions. Building that context requires Azure DevOps permissions, specifically code access granted through an access token you generate through Azure DevOps. Ensure that the token has the following scopes:
36+
37+
- `Code: Read & write`
38+
- `Pull Request Threads: Read & write`
39+
40+
You can provide this token to Semgrep by adding [Azure DevOps as a source code manager](/deployment/connect-scm#azure-devops-cloud).
41+
42+
Semgrep recommends using a service account, not a personal account, to [generate the personal access token](https://learn.microsoft.com/en-us/azure/devops/organizations/accounts/use-personal-access-tokens-to-authenticate) provided to Semgrep. Regardless of whether you use a personal or service account, the account must be assigned the **Owner** or **Project Collection Administrator** role for the organization.
43+
44+
</TabItem>
45+
46+
<TabItem value='bitbucket'>
47+
48+
Semgrep Assistant extends standard Semgrep capabilities by providing contextually aware AI-generated suggestions. Building that context requires Bitbucket permissions, specifically code access granted through an access token you generate through Bitbucket. Your token must be a [Workspace Access Token](https://support.atlassian.com/bitbucket-cloud/docs/workspace-access-tokens/), which are available to users with a Bitbucket Cloud Premium plan or higher. The token must have the following scopes:
49+
50+
- `Projects: Read`
51+
- `Repositories: Read`
52+
- `Pull requests: Read & Write`
53+
- `Webhooks: Read and write`
54+
55+
You can provide this token to Semgrep by [adding Bitbucket as a source code manager](/deployment/connect-scm#bitbucket-cloud).
56+
57+
</TabItem>
58+
3159
<TabItem value='github'>
3260

3361
Semgrep Assistant extends normal Semgrep capabilities by providing contextually aware AI-generated suggestions. In order to build that context, it requires GitHub permissions in addition to the

docs/semgrep-assistant/overview.md

+2
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,8 @@ Semgrep Assistant:
2323
- Primarily supports findings generated by Semgrep Code
2424
- Supports [the same languages as Semgrep Code](/supported-languages)
2525
- Is available to users of the following source code managers (SCMs):
26+
- Azure DevOps Cloud
27+
- Bitbucket Cloud Premium
2628
- GitHub Cloud and GitHub Enterprise Server (self-hosted)
2729
- GitLab, including SaaS and self-managed plans
2830
- Requires the Semgrep AppSec Platform for its use

0 commit comments

Comments
 (0)