Skip to content

Drift Detection Blueprint

This is the snippet from bitbucket-pipelines.yml that runs on a scheduled interval or on manual invocation.

INFO

To make drift detection run on a schedule, please follow the instructions in the Bitbucket documentation: https://support.atlassian.com/bitbucket-cloud/docs/pipeline-triggers/

yaml
custom:
  drift:
    - step:
        name: Drift Detection
        oidc: true
        script:
          - . ./bitbucket-scripts/install.sh
          - export WIP=<WORKLOAD_IDENTITY_PROVIDER>
          - export SA=<SERVICE_ACCOUNT>
          - . ./bitbucket-scripts/gcp-oidc-auth.sh $WIP $SA
          - . ./bitbucket-scripts/drift.sh