Burp Suite DAST: CI-driven scans with no dashboard - Port Swigger

Summary: PortSwigger documents a way to run Burp Scanner inside a CI/CD pipeline from a Docker container, without setting up a DAST server or using the Burp Suite DAST dashboard. Scan results are saved as JUnit or Burp XML files and viewed directly in the CI/CD platform, with scans configured through a commented YAML configuration file.
Bottom line: Running scanner output as JUnit or Burp XML inside the pipeline puts vulnerability findings in front of the developers and build systems that already gate releases, rather than in a separate dashboard that someone has to remember to check.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026