Verified Steps

Last updated at 2020-09-10

What are Verified Steps?

A Step contains the code that performs a specific build task. Bitrise has over 200 Steps in its Step Library (StepLib) which third party companies or open source teams can enrich with Steps based on their services/tools. This means they have full power to roll out updates to the Step while Bitrise maintains an overlaying control to ensure service quality and security.

A Verified Step means that the owner of a service or tool or an open source team guarantees secure, maintained, consistent, and high-quality performance for any Bitrise user. Our official Bitrise Steps are maintained by us, whereas our Community Steps are maintained by the community. It’s easy to decide which type a Step falls into on our GUI.

In this guide we explain how to get your Step verified by Bitrise.


  • For company owned services and tools: Your company must be the owner of the service or tool used by the Step to apply for the Verified badge.
  • For open-source services or tools: If you are a member of an open source or other informal team, please confirm with the rest of the team that you may sign this for yourself and that it applies to the Steps you are submitting for the team.
  • Your Step must comply with our Service Level Agreement.
  • Your Step must have its own Step icon.

We strongly recommend that you consult with our Step development guidelines before creating a Step.

Applying for a Verified badge

  1. Create the Step based on our Step development guideline. The Step’s repository MUST be on GitHub.
  2. Share your Step in our bitrise-steplib and fill out the New Pull Request Checklist.
  3. When the CLAassistant prompts you, sign our Contributor License Agreement. Until this is not completed, merging is blocked on the PR.

  4. Please fill out our Partnership Form!

Once you submitted the form, our Partner Management Team will contact you within 5 business days to discuss the rest of the process.

If at any stage of the process you wonder what happens with a Step candidate that is already covered by another Step in our StepLib, head over to How do we go about Step duplications?

Service level agreement for Verified Step authors

Anyone can contribute to a Verified Step which is already part of our StepLib by creating an issue or a pull request (PR). The Verified Step author has to manage the contribution (for example, issue, PR, or any maintenance such as third-party system changes) from start to finish. Bitrise monitors open issues and PRs created for Verified Steps and contacts the Verified Step authors if those contributions are not handled. If the Verified Step author fails to manage the contribution as described in our Contributor License Agreement and this SLA, Bitrise withdraws the Verified badge from the Step. This is to ensure Verified Steps in our StepLib are always of high quality and meet Bitrise users’ expectations.

Managing contributions

The following guidelines aim to help Verified Step authors categorize contributions. The Verified Step author is responsible for any contribution made to the Verified Step. The Verified Step author acknowledges the contribution by adding a label an estimated time to perform the fix, and merge the PR. There are four labels the author can use to categorize the type of contribution:

First response time means that there is a 5 day window during which the Verified Step author should respond to the contribution with the accepted or rejected labels.

Resolution time means a certain amount of business days during which the contribution (issue or PR) should be completed by the Verified Step author.

Type First response time Resolution time
critical-bug 5 business days 10 business days
bug 5 business days 15 business days
feature-request 5 business days 20 business days
maintenance 5 business days 20 business days

How do we go about Step duplications?

In general we try to keep our StepLib streamlined and avoid Step duplications for the same build task. Here you can find some questions and answers when it comes to any potential Step duplications.

Submit your Step and go through the application process. Once your application is completed, we deprecate the official Bitrise Step and our users can use your new Verified Step.

Submit your Step and go through the application process. Your new Verified Step and the Community Step will be both available in our StepLib.

If a Verified Step is already available in our StepLib, we reject Community Step submission for the same build task to avoid Step duplication. We offer to the Community Step developer to work on future updates of the already existing Verified Step.