portswigger-cloud/ci-driven-scanner

Runs an Enterprise scan against a target site

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Stalelast commit Sep 6, 2023
License
MIT

Pinned Snippet

workflow.ymlSHA-pinned
uses: portswigger-cloud/ci-driven-scanner-action@e6c133a7823b869a862677502b355e53ef9f64f5 # no releases — HEAD as of 2026-07-11

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
enterprise-server-urlThe URL of your Enterprise server.no
enterprise-api-keyThe API key that you copied when you created an API user.no
start-urlThe URL of the website you want Burp Scanner to scan.no
correlation-idYou only need to input a correlation ID if you want to view the scan results on the Burp Suite Enterprise Edition web interface. You can use a text string up to 64 characters long.no
reports-directoryThe directory to output reports to.noburp_reports
config-file-pathThe file path of your burp config file, this path must be an absolute path.noburp_config.yml

no outputs