security

We’ve just released (the first phase of) a new feature called Secret Envs filtering that enables managing secrets in a central location. Now you can set env vars as secrets from within your Workflows, mask them, and with a Script Step, use secrets from an external vault/company’s own service.

Bitriseは初となるSOC2 Type II 報告書を受領したことをここにご報告いたします。 これは厳格な監査を経て、Bitriseが業界の最高水準に準拠していることが検証され、顧客データのセキュリティに対する当社の取り組みが承認されました。

We’re proud to announce that we’ve received our first SOC 2 Type 2 report, meaning that a rigorous audit validated our compliance with the highest industry standards, confirming our commitment to the security of your data.

We talked to cybersecurity expert Anastasiia Voitova about all things related to mobile app security: from the first and most important steps teams should take to prevent potential attacks to reaching a high level of DevSecOps maturity.

We’re thrilled to announce another Verified Step focusing on the protection of your app: DexProtector, Licel’s product is now an official integration in the Bitrise Step Library, offering a unique solution to keep your apps as safe as possible.

We're announcing our new integration with Data Theorem's Mobile Secure product: the new Step will help you find vulnerabilities and data privacy issues within your iOS and Android applications on Bitrise.

With the new App-Ray Step, you can scan your apps for vulnerabilities such as security issues, privacy breaches, and potential data leaks. Available on Bitrise now.

John Turner from Bento for Business explains how to use GitHub's Deploy Keys feature and an SSH key to scope access from outside parties to a single repo, and limit that access to Read or Write.

We've introduced two new features: one to keep your secrets during PR builds, and one to enhance access control for Bitrise organization. Read the details.

We've introduced three security enhancements concerning logging in to Bitrise so that your account will be even safer. 🔒 Read on for the details.

We're rolling out support for open source projects on Bitrise and we've done a full security revision before this so that you can be sure that your secrets lie safe with us. We've introduced multiple security-related improvements, the last of which is a new type of input called sensitive.

Open source software is an integral part of modern development workflow. Startups and even Enterprise-level developers rely on open source components. But what about the risks? Read Limor Wainstein's post on open source and security.