Comments (3)
Here's my work-around/replacement, bash to the rescue as always, hope someone finds it useful...
Test owasp task replacement
jobs:
-
job: Build_Run_ZAP_Container
displayName: 'Install and Run ZAP'
pool:
vmImage: 'ubuntu-latest'steps:
#- checkout: none
-
task: bash@3
displayName : 'Run ZAP'
inputs:
targetType: 'inline'
script: |
echo "#### Get the latest ZAP docker image ####"
echo "############################################"docker pull softwaresecurityproject/zap-stable:latest echo "##### Set up some stuff #######" echo "###############################" /usr/bin/id -u root /usr/bin/mkdir -v -p /home/vsts/work/1/s/zap /usr/bin/chmod 777 /home/vsts/work/1/s/zap echo "Check whats in the dir tree" echo "###############################" pwd ls -ahl /home/vsts/work/1/s echo "####### RUN The SCAN #######" /usr/bin/docker --debug run -u 0 -v /home/vsts/work/1/s/zap:/zap/wrk/:rw softwaresecurityproject/zap-stable zap-full-scan.py -t https://dev-some-websiteapp1.azurewebsites.net:443 -J report.json -r report.html
-
from csedevops.
Would be easier to have the task giving the possibility to specify which image to use...
from csedevops.
There is no way to specify the image to use :-(
And ZAP announced that they were moving away from OWASP organization and the official ZAP Docker images are now published to the Software Security Project Docker Hub Organisation
Can we expect an update of the very useful DevOps task ?
Or do we need to plan and move to something else?
See also zaproxy/zaproxy#8440
from csedevops.
Related Issues (20)
- Reports are created as root user
- How to implement Ajax Spider option during testing for SPA apps. HOT 1
- Reporting outputs are empty since latest OWASPZAP Docker image update HOT 2
- Configurable Pipeline Runner: Unable to get System Access Token HOT 7
- Update to ZAP 2.11.1?
- Pipeline Runner default branch
- Unable to scan an App Service from Azure HOT 4
- ##[error]ENOENT: no such file or directory, open '/home/vsts/work/1/s/owaspzap/report.json' HOT 7
- Could not queue the build because there were validation errors or warnings
- Unable to locate executable file: 'chmod' HOT 1
- ##[error] Could not queue the build because there were validation errors or warnings
- EISDIR: illegal operation on a directory, read HOT 1
- Failed to load context file - file does not exist in the docker container HOT 1
- Support for Bicep
- Cannot obtain build Ids inside Powershell Task
- Configurable Pipeline Runner: Support passing parameters HOT 3
- OWASP ZAP Scanner Azure pipeline extension not working anymore HOT 1
- Azure CI Pipeline with 'agentScan' type is failing HOT 1
- 2 Critical and 2 High Vulnerabilities identified in JFROG scan
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from csedevops.