Add support for bitbucket cloud webhook secrets

[derektamsen]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request. Searching for pre-existing feature requests helps us consolidate datapoints for identical requirements into a single place, thank you!
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request.
• If you are interested in working on this issue or have submitted a pull request, please leave a comment.

---

• [ ] I'd be willing to implement this feature (contributing guide)

Describe the user story

Bitbucket cloud recently launched support for webhook secrets. Atlantis should allow adding a webhook secret for bitbucket cloud events. This will add improved security for atlantis to ensure recieved hooks are actually from bitbucket cloud instead of just relying on ip allow lists.

Describe the solution you'd like

The existing Atlantis support for bitbucket server webhook secrets should be extended to bitbucket cloud. This should use the existing configuration options with --bitbucket-webhook-secret. Additionally, once the feature is implemented, the warnings in the documentation regarding bitbucket cloud not supporting webhook secrets should be removed.

Describe the drawbacks of your solution

n/a

Describe alternatives you've considered

n/a

[rohitgit-web]

We are also facing same issue.

[almightyfoon]

The logic for the feature is already in the bitbucketserver client, it should be as simple as porting over the logic and removing the specific check in place to stop that.

[Alexx23]

BitBucket supports secrets in webhooks from October 2023. BitBucket post: https://bitbucket.org/blog/enhanced-webhook-security

So please remove the error that appears when using the "--bitbucket-webhook-secret" flag. Error: --bitbucket-webhook-secret cannot be specified for BitBucket Cloud because it is not supported by BitBucket