DevSensei PR Workflow Automation | Code Owners for Bitbucket

We had a problem with Code Owners for Bitbucket Server. The AuthorSelfApproval option for merge checks broke in an unexpected scenario. They were quick to respond and diagnose problem. A version with fix released soon after.

Usefull app, but without email or some immutable information to write a control group it is impracticable to implement on large groups. Therefore, I did a test and a user can change it's own name to be the same as an "Owner" and approve a Pull Request, and the build process pass without catching that is a "fake owner". It needs to mature the app for using without this security problem. Support is very responsive and helped me understand that email problem is a limitation of the Bitbucket Cloud itself, however there should be a solution to avoid this possibility of a "fake owner".

• 

  Elevatic

  Thanks for your review.

  Please notice that this review targets our Bitbucket Cloud app edition ONLY.

  For Bitbucket Data Center, we support e-mail addresses.

  Bitbucket Cloud does not support looking up user's e-mail addresses, so we can only use the display name there.

  We plan to support Bitbucket Cloud reviewer groups instead. Please vote on our feature request to get this implemented.

Very useful app, the new view that shows the Code Owners on the side or actually outputs potential errors with the CODEOWNERS file is very useful and much easier to work with than the earlier versions! The only downside is that approvals by Code Owners cannot be enforced but at least they get notified. Support is very responsive and helped me resolve the issues I was having rather quickly, thanks Michael!

• 

  Elevatic

  Thanks a lot for your kind review! For merge checks in Bitbucket Cloud, please vote and watch this feature request:

  https://mibexsoftware.atlassian.net/browse/CODEOWNERS-36