Maintaining extensions on the BApp Store - Port Swigger
Summary: PortSwigger published maintenance instructions for extensions accepted into the BApp Store, requiring developers to monitor their GitHub repository for community issues and to submit pull requests only against PortSwigger's fork of their original repository. The process calls for an "Update for existing extension" issue on the extension-portal repository, after which PortSwigger reviews, merges, tests, and publishes the update, and the company now offers a CLAUDE.md file so developers can use Claude Code or another LLM to draft changes.
Why it matters: PortSwigger states plainly that LLM-suggested code may not always produce correct or secure output and must be reviewed and tested before submission - a reminder that AI-assisted changes to security tooling still land on the developer's judgment, not the model's.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026