As it seems to me, Asset Discovery is still using SHA1 with the SSH-RSA discovery method. It would be nice if there would be alternatives, since SHA1 is no longer considered safe and has hereby been deprecated.

Bitbucket has already been updated, see: this.

PS: This should be for Cloud, but I can't choose Jira Service Management Cloud in the project field.