drop bitbucket pipelines log · parse step output · runs locally
flags repository variables · aws/gcloud cli with keys · docker push after secret export · non-zero exit codes
heuristic screener · bitbucket log format varies by runner image — not definitive proof · best-effort step boundary detection