How to secure my webhooks?

[ax3lf]

Hi,

after pushing to the repository i want to execute a script. How do i secure webhooks? There is no field for e.g. a token which i can validate. How can i check that the request comes from bitbucket?

[Alexey Matveev · Accepted solution]

Hello,

Kindly have a look at this question and answer:

https://community.atlassian.com/t5/Jira-questions/how-to-provide-Bearer-token-in-webhook-url/qaq-p/1011782

[ax3lf]

Hi,

thank you. Is this a premium feature? I think security is important and inserting a token into a field is not so difficult to implement

[Stanley]

This is not an answer but a concern. On Github we have a secret token but bit bucket requires us tho whitelist IPs. I think they need to add a token