Cyber Risks · PortSwigger Research

Example integrations for CI-driven scans with no dashboard - Port Swigger

Summary: PortSwigger published platform-specific integration examples for running CI-driven Burp Scanner scans without a dashboard, showing how to add the scan command and configuration YAML file to a pipeline script. The guides cover popular CI platforms, and the company states CI-driven scans can be integrated with any CI platform that supports containers, with the listed platforms offering no additional functionality over others.

Why it matters: The setup requires editing pipeline scripts and a configuration YAML file directly, so the scan's coverage depends on whoever maintains that pipeline - and the source notes these examples give no extra capability beyond any other container-supporting CI platform.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related