Only arm64 images available about csedevops

[twartonick]

Here's my work-around/replacement, bash to the rescue as always, hope someone finds it useful...

Test owasp task replacement

jobs:

• job: Build_Run_ZAP_Container
  displayName: 'Install and Run ZAP'
  pool:
  vmImage: 'ubuntu-latest'

  steps:

  #- checkout: none

  • task: bash@3
    displayName : 'Run ZAP'
    inputs:
    targetType: 'inline'
    script: |
    echo "#### Get the latest ZAP docker image ####"
    echo "############################################"

    docker pull softwaresecurityproject/zap-stable:latest
    
    echo "##### Set up some stuff #######"
    echo "###############################"
    /usr/bin/id -u root 
    /usr/bin/mkdir -v -p /home/vsts/work/1/s/zap
    /usr/bin/chmod 777 /home/vsts/work/1/s/zap
    
    echo "Check whats in the dir tree"
    echo "###############################"
    
    pwd
    ls -ahl /home/vsts/work/1/s
    
    
    echo "####### RUN The SCAN #######"
    /usr/bin/docker --debug run -u 0 -v /home/vsts/work/1/s/zap:/zap/wrk/:rw softwaresecurityproject/zap-stable zap-full-scan.py -t https://dev-some-websiteapp1.azurewebsites.net:443 -J report.json -r report.html
    

[ghs]

Would be easier to have the task giving the possibility to specify which image to use...

[superjulius]

There is no way to specify the image to use :-(

And ZAP announced that they were moving away from OWASP organization and the official ZAP Docker images are now published to the Software Security Project Docker Hub Organisation

Can we expect an update of the very useful DevOps task ?

Or do we need to plan and move to something else?

See also zaproxy/zaproxy#8440