docker-zap

docker-zap copied to clipboard

Followed your three blog posts today and setup a nightly scan for the zap cli and zap api scan. But how do I setup the build to fail when issues...

johnjbateman

Hook up easy-to-read/parse HTML report from ZAP CLI/API scans

4

Need to get a "pretty-printed" easy-to-read/parse HTML (or similarly-formatted) report from ZAP's scans. Look at https://renouncedthoughts.wordpress.com/2015/01/13/owasp-zap-workaround-html-report-from-apis-daemon-mode/ and any potential other options.

stephendonner

Hi, How can we import "context" (which is already been generated by using GUI) if we are using Dockerized ZAP by ZAP CLI? It would be helpful if the step...

lgnandan

Hi, I used docker zap in Jenkins. Using Zap UI, I saved the context and authentication method. From Jenkins, the authentication script cant be found. Zap Logs: Found Java version...

owasp-helsinki

Make active-scan more aggressive (later, separately, make it configurable)

7

For now, until it's configurable, need to make the active-scan (https://github.com/stephendonner/docker-zap/blob/69c8d4853cc7ef604b811921635a10d0aa5a8ae5/run-docker.sh#L10) more aggressive against its target.

stephendonner