-
Notifications
You must be signed in to change notification settings - Fork 10
Open
Description
I created a VM on Azure and installed in Ubuntu. I installed Docker and Docker Image for OWASP ZAP which is reffered by https://www.zaproxy.org/docs/docker/webswing/.
docker run -u zap -p 8080:8080 -p 8090:8090 -i owasp/zap2docker-stable zap-webswing.sh
Then I added CI step to scan.
stages:
- stage: devbuild
displayName: Dev Build
jobs:
- job: Job_1
displayName: Agent job 1
pool:
name: Azure Pipelines
steps:
- checkout: self
fetchDepth: 1
- task: OwaspZapScan@2
inputs:
ZapApiUrl: '<IP-Address-OWASP-VM>:8080'
ZapApiKey: '<API-KEY>'
TargetUrl: '<TARGET-URL>'
ClearSession: true
ExecuteSpiderScan: true
RecurseSpider: true
ExecuteActiveScan: true
InScopeOnly: true
- task: PublishHtmlReport@1
inputs:
reportDir: '$(System.DefaultWorkingDirectory)\OWASP-ZAP-Report-$(Build.BuildId).html'
At this point I get an error in below and CI ends with error message
##[error]Task Failed. Error: “404 – \”\\n\\n\\nError 404 Not Found.\\n\\nHTTP ERROR 404 Not Found.\\n\\nURI:/JSON/core/action/newSession/\\nSTATUS:404\\nMESSAGE:Not Found.\\nSERVLET:WebswingServlet\\n\\n\\n\\n\\n\””
Metadata
Metadata
Assignees
Labels
No labels