Cyber Risks · PortSwigger Research

Enterprise Edition Jenkins plugin 2021.3

Summary: PortSwigger released version 2021.3 of Burp Suite Enterprise Edition's native Jenkins plugin, adding a "site-driven scan" integration option while retaining the legacy "Burp scan" option so existing integrations keep working. The plugin requires Java 11 and Jenkins 2.164.1 or higher, and the site-driven option requires Enterprise Edition 2021.3 or higher; it fetches sites from Enterprise Edition via its GraphQL API so users select the exact site for a scan instead of relying on automated site-matching rules.

Bottom line: The plugin can fail a build based on scan results, so the accuracy of site matching decides whether a pipeline blocks on the right findings - manual site selection is what keeps Jenkins-generated and user-created scan data aggregated under the correct site for posture tracking over time.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related