Cyber Risks · PortSwigger Research

Enterprise Edition generic CI/CD driver 2021.3

Summary: PortSwigger released version 2021.3 of its generic CI/CD driver for Burp Suite Enterprise Edition, adding a "site-driven scan" integration option while keeping the legacy "Burp scan" option unchanged. The new option fetches sites from Burp Suite Enterprise Edition via its GraphQL API, so users select the exact site for a scan instead of relying on automated site-matching rules, and it pulls in site data such as default scan configurations, URL scope, and false positive settings.

What you should know: Scan results that land under the wrong site break the aggregation and trend data security leaders use to track posture over time, which is the gap the manual site selection is meant to close. Using the new option also requires upgrading Burp Suite Enterprise Edition to 2021.3 or higher, so pipeline integrations and the platform version have to move together.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related