Recreate Security Scan task on CA Jenkins

GetDKAN / ops

DKAN operations

2 stars 1 forks source link

Recreate Security Scan task on CA Jenkins #166

Closed janette closed 4 years ago

janette commented 4 years ago

https://jenkins.nuamsdev.com/job/SecurityScan/

dasumner commented 4 years ago

Need to setup ZAP container on ci.civicactions.net and configure CA Jenkins to use it for this job.

dasumner commented 4 years ago

Security Scan Job has been recreated and confirmed to run and produce report. Lesson learned: the OWASP ZAP plugin requires that ZAP be installed locally (on the Jenkins server). The current setup is temporary. Ideally, a job will bring up a Docker ZAP container, run the job and save the results to a permanent volume. The new job is configured to run on the 15th.