Cyber Risks · PortSwigger Research

Overview of CI/CD platform integration - Port Swigger

Summary: PortSwigger's documentation describes its legacy CI/CD integration for Burp Suite DAST, which provided plugins for Jenkins and TeamCity plus a generic driver for other platforms, and is now maintained only for users already on that approach. The legacy process adds build steps that trigger a scan, optionally linked to an existing site in Burp Suite DAST, with results viewable in the web UI or exported as HTML reports, and every option requires creating an API user in Burp Suite DAST first.

What's compelling: Teams still running the Jenkins, TeamCity, or generic-driver integration are on a path PortSwigger now documents only as legacy, and the replacement is a different setup - so the question is how many pipelines still depend on build steps that will not carry forward.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related