> ## Documentation Index
> Fetch the complete documentation index at: https://infisical-devin-1781641701-docs-github-pat-fine-grained.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Bitbucket

> How to sync secrets from Infisical to Bitbucket

Infisical lets you sync secrets to Bitbucket at the repository-level and deployment environment-level.

Prerequisites:

* Set up and add envars to [Infisical Cloud](https://app.infisical.com)

<AccordionGroup>
  <Accordion title="Push secrets to Bitbucket from Infisical">
    Use our [Bitbucket Secret Syncs](../secret-syncs/bitbucket)
  </Accordion>

  <Accordion title="Pull secrets in Bitbucket pipelines from Infisical">
    <Steps>
      <Step title="Configure Infisical Access">
        Configure a [Machine Identity](https://infisical.com/docs/documentation/platform/identities/universal-auth) for your project and give it permissions to read secrets from your desired Infisical projects and environments.
      </Step>

      <Step title="Initialize Bitbucket variables">
        Create Bitbucket variables (can be either workspace, repository, or deployment-level) to store Machine Identity Client ID and Client Secret.

        <img src="https://mintlify.s3.us-west-1.amazonaws.com/infisical-devin-1781641701-docs-github-pat-fine-grained/images/integrations/bitbucket/integrations-bitbucket-env.png" alt="integrations bitbucket" />
      </Step>

      <Step title="Integrate Infisical secrets into the pipeline">
        Edit your Bitbucket pipeline YAML file to include the use of the Infisical CLI to fetch and inject secrets into any script or command within the pipeline.

        #### Example

        ```yaml theme={null}
        image: atlassian/default-image:3

        pipelines:
          default:
            - step:
                name: Build application with secrets from Infisical
                script:
                  - apt update && apt install -y curl
                  - curl -1sLf 'https://artifacts-cli.infisical.com/setup.deb.sh' | bash
                  - apt-get update && apt-get install -y infisical
                  - export INFISICAL_TOKEN=$(infisical login --method=universal-auth --client-id=$INFISICAL_CLIENT_ID --client-secret=$INFISICAL_CLIENT_SECRET --silent --plain)
                  - infisical run --projectId=1d0443c1-cd43-4b3a-91a3-9d5f81254a89 --env=dev -- npm run build
        ```

        <Tip>
          Set the values of `projectId` and `env` flags in the `infisical run` command to your intended source path. For more options, refer to the CLI command reference [here](https://infisical.com/docs/cli/commands/run).
        </Tip>
      </Step>
    </Steps>
  </Accordion>
</AccordionGroup>