Sha256: 28537be4a075839d5ac11c3d2eb0e0af2e2b57fd0aa0d0fb9e0701beb09f33e1
Contents?: true
Size: 912 Bytes
Versions: 16
Compression:
Stored size: 912 Bytes
Contents
#!/usr/bin/env bash
usage="
$0: Run OWASP Zap scan against local server
Usage:
$0 -h
$0 [-f] [-s]
Options:
-h: show help and exit
-f: run full scan
-s: run with zap2docker-stable docker image
Notes:
* defaults to running a baseline scan in zap2docker-weekly
* prerequisites:
* db must be running
* docker must be running
* nothing listening on port 3000
* script currently only works on macOS
"
set -e
scan="zap-baseline.py"
docker_name="owasp/zap2docker-weekly"
while getopts "hfs" opt; do
case "$opt" in
f)
scan="zap-full-scan.py"
;;
s)
docker_name="owasp/zap2docker-stable"
;;
*)
echo "$usage"
exit 1
;;
esac
done
hostname="http://host.docker.internal:3000"
args="-c zap.conf -I -r zap_report.html"
cmd="docker run --rm --user root -v $(pwd):/zap/wrk/:rw -t $docker_name $scan -t $hostname $args"
`dirname "$0"`/with-server "$cmd"
Version data entries
16 entries across 16 versions & 1 rubygems