Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Integrate Burp Suite PRO in Microsoft Azure DevOps CI/CD pipeline ?

Nirjhar | Last updated: Sep 25, 2020 04:48PM UTC

Do you have any detailed documentation which explains step by step about this ? I already know about https://portswigger.net/burp/extender/ci-integration and would like to work with PRO and not Enterprise. Would like to know if you have any detailed documentation/video of how to exactly integrate and actually make it functional in Microsoft Azure DevOps CI/CD pipeline while working with PRO edition and the extension that you are providing us. Regards, Nirjhar

Uthman, PortSwigger Agent | Last updated: Sep 28, 2020 09:21AM UTC

Hi Nirjhar, Unfortunately, we do not have any documentation on Azure DevOps integration. Burp Pro is not designed for CI integration either. We strongly recommend Enterprise because it has been created specifically for this purpose. To achieve what you are trying to do, you can create a .bat script that runs the generic CI driver and this can be run as a Batch script task in Azure Pipelines. If you have not already completed a trial of Enterprise, we can offer this for free (30 days): - https://portswigger.net/requestfreetrial/enterprise

Nirjhar | Last updated: Oct 03, 2020 04:21PM UTC

Thanks for your reply, Uthman. So, from your statement if I have understood it correctly, would I be able to introduce CI/CD to Azure Pipeline and get the builds scanned if I am shifting to enterprise version ? If the answer is yes, could you / your team please help guide how to do that? A detailed documentation / Video would be helpful. Thanks again! Regards, Nirjhar

Uthman, PortSwigger Agent | Last updated: Oct 05, 2020 08:53AM UTC

Hi Nirjhar, You will need to use the same method suggested above but it would display in a much better way in the Enterprise version. You can also compare scan deltas and view the information in dashboards (charts/graphs). We do not have any detailed instructions for Azure DevOps (ADO) but you would need to run a batch script task in Azure Pipeline that runs the generic CI driver. We are working on instructions for ADO but these will be released in the future. If you need any further information/assistance, please email us at support@portswigger.net

| Last updated: Dec 08, 2020 07:27AM UTC

Hi Uthman, I am also working on the same thing just like nirjhar. Please help me with the intructions to integrate burp suite pro with Azure Devops Pipelines. Regards Moole Parameswar Reddy

Uthman, PortSwigger Agent | Last updated: Dec 08, 2020 10:25AM UTC

Hi Moole, As I described above, we do not have any official instructions since Burp Professional is not designed for CI integration. However, please download the generic CI driver below and integrate it into a batch script that can be run as a task: - https://portswigger.net/burp/extender/ci-integration - https://docs.microsoft.com/en-us/azure/devops/pipelines/tasks/utility/batch-script?view=azure-devops

Rocky | Last updated: Mar 30, 2023 06:42AM UTC

Hi, Is the instructions to integrate burp suite Enterprise with Azure Devops Pipelines now available?

Alex, PortSwigger Agent | Last updated: Mar 30, 2023 09:02AM UTC

Hi Rocky, We don't have any specific instructions for Azure DevOps, but you can use our generic driver instructions, add your command to a batch script, and run that as a task in your pipeline: https://portswigger.net/burp/documentation/enterprise/integrate-ci-cd-platforms/generic https://learn.microsoft.com/en-us/azure/devops/pipelines/tasks/reference/batch-script-v1?view=azure-pipelines&viewFallbackFrom=azure-devops It's unlikely we will be releasing any further platform-specific drivers, as we are currently developing a new CI/CD integration tool for Burp Suite Enterprise involving a containerized version of Burp Scanner. This solution is platform agnostic and will be available later this year. Best regards,

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.