Raising GitHub issues automatically - Port Swigger
Summary: PortSwigger's Burp Suite DAST now lets users attach triggers to an action so it raises GitHub issues automatically when a scan finds DAST issues matching the trigger's severities, confidences and sites. It raises at most one automatic GitHub issue per DAST issue, per connection, per repository, and retries failures in the background with a delay that starts at a few minutes and doubles up to once a day.
Key Takeaway: Automatic ticket creation can flood a repository if triggers are set too broadly, which is why PortSwigger advises starting with high severity and confidence levels and lowering them only after seeing how many issues scans produce. Failed raises are retried with a delay that grows to once a day, so a rejected token or missing permission can leave findings untracked for a long stretch.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026