Host key verification failed (bitbucket)

Unfortunately, even though I am using a private repo with npm, the first article doesn’t cover my situation.
The article is explaining what to do with a private NPM module hosted on NPM, while my dependecies are hosted on Bitbucket.

I’ve made the cleanest possible set up in order to debug better.

package.json

{
  "name": "netlify-site",
  "version": "0.0.1",
  "repository": {
    "type": "git",
    "url": "https://github.com/ndr4/netlify-site.git"
  },
  "dependencies": {
    "my-dep": "git+ssh://git@bitbucket.org/ndr4/my-dep.git"
  }
}

Even if I set the Deploy key from Netlify to my Bitbucket account, this fails.

However if I set my dependency, in the package.json above, with an App Password, like this:

"my-dep": "https://ndr4:{MYAPPPASSWORD}@bitbucket.org/ndr4/my-dep.git"

it will install the dependecy but this will show the password in my public github repo “netlify-site”.

Plus this is a very simple situation. In reality this private dependecy has other private dependencies and as you can imagine I cannot use the APP-PASSWORD method for all my dependencies since they are also used in other cases other than Netlify.

It seems the build is not using the Deploy key and I am wondering why.

1 Like