Skip to content

OWASP Zap Dynamic Application Security Test

Add OWASP Zap DAST security scanner to pipeline. Passive baseline scan is run always and full scan is triggered manually. Full scan attacks the application actively, so it might even brake the app.

Currently job artifacts are generated in .json, .md and .html format.

Link to scanner https://www.zaproxy.org/docs/docker/

Merge request reports

Loading