Bitbucket app password obsoletion in regards to SonarQube Server - Bitbucket Cloud integration

[bojan.stojanovic-LF (Boyan Stoyanovich)]

From September 9th 2025 Bitbucket will no longer allow the creation of new app passwords and will stop working entirely on June 9, 2026: Bitbucket Cloud transitions to API tokens: enhancing security with app password deprecation - Work Life by Atlassian

Bitbucket Cloud integration | SonarQube Server Documentation official documentation how to, for latest 2025.03 version, still mentions and requires explicitly app password for importing Bitbucket projects, and nothing else is an option.. So, my suggestion is to update the next version ASAP to use API tokens instead, before September 2025?

[Colin]

Hey @bojan.stojanovic-LF

Thanks for the heads-up.

We just finished some testing, and the good news is that SonarQube will continue to work, as long as you:

1. Use your e-mail address as the Bitbucket username
2. Provide a scoped token (read:repository:bitbucket) where SonarQube asks for the app password.

So at first glance, this is just a UI and docs update, and maybe a UI warning for existing users to migrate their config.

Will keep you posted.

[chrislain (Chrislain Razafimahefa)]

Hello,

An issue has been created to work on this task.