For a long time, we were using app passwords to access to Bitbucket. In the Jenkins jobs we just setup the Git https url and select the app password that was created as a username/password credential.
Now, Bitbucket is deprecating the app passwords. As I understand, the API tokens cannot be used as a replacement, since they are intended to be used with the API only, not for repo cloning.
What is the suggested way now to clone a Git repo from Bitbucket within a Jenkins job? And does this also will work for pushing changes (e.g. during a Maven release)?
Thank you for any hints and help!
Jenkins setup:
Jenkins: 2.504.3 OS: Linux - 6.8.0-63-generic Java: 21.0.7 - Ubuntu (OpenJDK 64-Bit Server VM) --- active-directory:2.40 ant:513.vde9e7b_a_0da_0f antisamy-markup-formatter:173.v680e3a_b_69ff3 apache-httpcomponents-client-4-api:4.5.14-269.vfa_2321039a_83 asm-api:9.8-135.vb_2239d08ee90 bootstrap5-api:5.3.7-1 bouncycastle-api:2.30.1.80-261.v00c0e2618ec3 branch-api:2.1226.ve1e7e0b_4b_95f build-timeout:1.38 caffeine-api:3.2.0-166.v72a_6d74b_870f checks-api:373.vfe7645102093 cloudbees-folder:6.1026.ve06dfa_cf31c3 commons-lang3-api:3.17.0-87.v5cf526e63b_8b_ commons-text-api:1.13.1-176.v74d88f22034b_ credentials:1415.v831096eb_5534 credentials-binding:687.v619cb_15e923f dark-theme:524.vd675b_22b_30cb_ display-url-api:2.209.v582ed814ff2f durable-task:587.v84b_877235b_45 echarts-api:5.6.0-5 eddsa-api:0.3.0.1-19.vc432d923e5ee email-ext:1911.v19b_8e86f9815 font-awesome-api:6.7.2-1 git:5.7.0 git-client:6.2.0 github:1.43.0 github-api:1.321-488.v9b_c0da_9533f8 github-branch-source:1824.v046257273408 gradle:2.15 gson-api:2.13.1-139.v4569c2ef303f instance-identity:203.v15e81a_1b_7a_38 ionicons-api:88.va_4187cb_eddf1 jackson2-api:2.19.0-404.vb_b_0fd2fea_e10 jakarta-activation-api:2.1.3-2 jakarta-mail-api:2.1.3-2 javax-activation-api:1.2.0-8 jaxb:2.3.9-133.vb_ec76a_73f706 jjwt-api:0.11.5-120.v0268cf544b_89 joda-time-api:2.14.0-127.v7d9da_295a_d51 jquery3-api:3.7.1-3 json-api:20250517-153.vc8a_a_d87c0ce3 json-path-api:2.9.0-148.v22a_7ffe323ce jsoup:1.21.1-52.v96e4041b_60fd junit:1335.v6b_a_a_e18534e1 ldap:780.vcb_33c9a_e4332 mailer:509.vc54d23fc427e matrix-auth:3.2.6 matrix-project:849.v0cd64ed7e531 metrics:4.2.32-476.v5042e1c1edd7 mina-sshd-api-common:2.15.0-161.vb_200831a_c15b_ mina-sshd-api-core:2.15.0-161.vb_200831a_c15b_ okhttp-api:4.11.0-189.v976fa_d3379d6 pam-auth:1.12 pipeline-build-step:571.v08a_fffd4b_0ce pipeline-github-lib:65.v203688e7727e pipeline-graph-view:590.v06d574696250 pipeline-groovy-lib:752.vdddedf804e72 pipeline-input-step:527.vd61b_1d3c5078 pipeline-milestone-step:138.v78ca_76831a_43 pipeline-model-api:2.2255.v56a_15e805f12 pipeline-model-definition:2.2255.v56a_15e805f12 pipeline-model-extensions:2.2255.v56a_15e805f12 pipeline-stage-step:322.vecffa_99f371c pipeline-stage-tags-metadata:2.2255.v56a_15e805f12 plain-credentials:199.v9f8e1f741799 plugin-util-api:6.1.0 resource-disposer:0.25 scm-api:704.v3ce5c542825a_ script-security:1373.vb_b_4a_a_c26fa_00 snakeyaml-api:2.3-125.v4d77857a_b_402 ssh-credentials:359.v2191c4cf635f ssh-slaves:3.1031.v72c6b_883b_869 structs:350.v3b_30f09f2363 theme-manager:310.v234c7de84f9c timestamper:1.30 token-macro:444.v52de7e9c573d trilead-api:2.209.v0e69b_c43c245 variant:70.va_d9f17f859e0 workflow-aggregator:608.v67378e9d3db_1 workflow-api:1373.v7b_813f10efa_b_ workflow-basic-steps:1079.vce64b_a_929c5a_ workflow-cps:4150.ve20ca_b_a_a_2815 workflow-durable-task-step:1434.v1b_595c29ddd7 workflow-job:1540.v295eccc9778f workflow-multibranch:806.vb_b_688f609ee9 workflow-scm-step:437.v05a_f66b_e5ef8 workflow-step-api:700.v6e45cb_a_5a_a_21 workflow-support:968.v8f17397e87b_8 ws-cleanup:0.48