Connecting Burp Suite DAST to GitHub - Port Swigger
Summary: PortSwigger's documentation describes how Burp Suite DAST connects to GitHub so scans can create and link GitHub issues, using a personal access token per connection and a selected deployment that hosts the repositories. Cloud instances connect only to allow-listed hosts including api.github.com and api.*.ghe.com, accept only public https URLs, and cannot connect to GitHub Enterprise Server, which requires a Self-hosted deployment instead.
What's compelling: Cloud deployments of Burp Suite DAST cannot reach GitHub Enterprise Server at all, so teams running self-hosted GitHub have to choose between a Self-hosted deployment and losing the issue-creation link between scanner findings and their repositories.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026