-
Since ZAP vulnerability scans can generate a lot of issues, it might be nice to be able to e.g. ignore any LOW or INFO vulnerabilities. (so that issues are not created)
e.g.
```yaml
jobs:
zap_…
-
There seems to be both a baseline and full scan ZAP GitHub Actions in the Marketplace:
- https://github.com/marketplace/actions/owasp-zap-baseline-scan
- https://github.com/marketplace/actions/owa…
-
- Site: [https://demo.owasp-juice.shop](https://demo.owasp-juice.shop)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 3:
- [https://demo.owasp-juice.shop](h…
-
I'm using the ZAP baseline action to scan an application that, in the testing environment, is protected by basic auth.
I documented how to do this here: https://adrianhesketh.com/2020/07/07/owasp-b…
-
Is there a particular reason that the dependency versions are fixed:
```python
install_requires=[
'click==4.0',
'python-owasp-zap-v2.4==0.0.14',
'requests==2.20.1',
…
NF997 updated
2 years ago
-
2019-02-20T18:02:41.8626486Z ##[section]Starting: OWASP ZAP Scan
2019-02-20T18:02:41.8648750Z ==============================================================================
2019-02-20T18:02:41.86491…
-
### 📦 部署方式
Docker
### 📌 软件版本
v2.14.0
### 💻 系统环境
Other Linux
### 📌 系统版本
Centos7
### 🌐 浏览器
Edge
### 📌 浏览器版本
latest
### 🐛 问题描述
![image](https://github.com/user-attachments/assets/6a2e31d3-4e…
-
It would be nice to have some sort of security scanning functionality in CI to try to catch any security problems.
## SCA / Dependency scanning
- Snyk? (sketchy PNPM support?)
- [OWASP Dependen…
-
- Site: [https://www.zaproxy.org](https://www.zaproxy.org)
**New Alerts**
- **Absence of Anti-CSRF Tokens** [10202] total: 1:
- [https://www.zaproxy.org/](https://www.zaproxy.org/)
- **Con…
-
![image](https://user-images.githubusercontent.com/54593998/73503646-99fa2e80-43ab-11ea-9624-66540bdbdae3.png)
error OWASP ZAP Scan
I'm having trouble applying the Proxy to the application's Scan …