microsoft
no such file or directory, open '/opt/vsts-agent-linux/_work/r1/a/owaspzap/report.json'
I have followed these instructions https://marketplace.visualstudio.com/items?itemName=CSE-DevOps.zap-scanner to run the owasp scanner with a small difference in the setting: I use targeted scan instead of scan on agent and also port 443, because the release is being deployed to this port.
Anyway, I get the following error message, which tells me nothing:
2021-04-28T08:11:29.5182663Z ##[section]Starting: ZAP Scanner
2021-04-28T08:11:29.5416938Z ==============================================================================
2021-04-28T08:11:29.5417838Z Task : OWASP Zap Scanner
2021-04-28T08:11:29.5418427Z Description : Utilize the OWASP/ZAP scanner within Azure DevOps
2021-04-28T08:11:29.5418716Z Version : 1.0.1
2021-04-28T08:11:29.5419214Z Author : Doyle Turner, Anthony Turner
2021-04-28T08:11:29.5419906Z Help :
2021-04-28T08:11:29.5420167Z ==============================================================================
2021-04-28T08:11:30.2901940Z [command]/usr/bin/chmod 777 /opt/vsts-agent-linux/_work/r1/a/owaspzap
2021-04-28T08:11:30.2904783Z [command]/usr/bin/id -u root
2021-04-28T08:11:30.2904982Z 0
2021-04-28T08:11:30.2933668Z ##[error]ENOENT: no such file or directory, open '/opt/vsts-agent-linux/_work/r1/a/owaspzap/report.json'
2021-04-28T08:11:30.2995398Z ##[section]Finishing: ZAP Scanner
There are also several reviews on the marketplace with this problem. They are all unanswered:
https://marketplace.visualstudio.com/items?itemName=CSE-DevOps.zap-scanner&ssr=false#review-details
I am having roughly the same issue, and see that others have noted it in the reviews on the Marketplace site: https://marketplace.visualstudio.com/items?itemName=CSE-DevOps.zap-scanner&ssr=false#review-details
Is there any documentation for addressing this issue?
I'm afraid that the original authors have left or abandoned the project. We should try and find someone to take over.
EDIT: I've pinged the overall Microsoft Open Source Twitter account, which seems to be one way to interact with the overall project team. -> https://twitter.com/TessSluijter/status/1391817977922740225
