Configuring CI-driven scans with no dashboard - Port Swigger
Summary: PortSwigger's documentation states that CI-driven scans run without a dashboard can be configured to use more advanced Burp Scanner features, such as application logins, by supplying a configuration file. That file is in YAML format and defines the site settings and scan configurations Burp Scanner uses to perform a scan.
Key Takeaway: Scans wired into CI with no dashboard are the ones most likely to run unattended, so the YAML file defining site settings and scan configurations becomes the only place those settings live - and the only thing standing between a scan and the authenticated areas it is meant to test.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026