search

wallarm / gotestwaf

An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
https://lab.wallarm.com/test-your-waf-before-hackers/
MIT License
1.55k stars 212 forks source link

Unable to create and email report #196

Closed joyent-secops closed 1 year ago

joyent-secops commented 1 year ago

When I finish running the gotestwaf using the following command: docker run --network="host"^Cit -v ${PWD}/reports:/app/reports wallarm/gotestwaf --url=https://myweb.com

It can't create report and send emails.

Do you want to include payload details to the report? ([y/N]): y INFO[0254] Export full report filename=reports/waf-evaluation-report-2023-March-24-08-43-43.pdf Email to send the report (ENTER to skip): xxxxx@xxxxx.com ERRO[0263] caught error in main function error="couldn't send report by email: Invalid information in report data"

I tested it in the centos 7 and ubuntu 20.04 (both running x86_64).

svkirillov commented 1 year ago

Hi!

Thank you for the report!

The bug was in the CI/CD configuration. Due to the specifics of the default strategy of repository checkout in GitHub Actions, running git describe failed and the version string was empty, affecting report validation on the server.

Could you please pull the GoTestWAF again and check if everything works properly?

docker image rm wallarm/gotestwaf
docker pull wallarm/gotestwaf
docker run --rm wallarm/gotestwaf --version

If the output is GoTestWAF v0.4.0, you can try to run scanning again.

joyent-secops commented 1 year ago

@svkirillov Thank you, it works fine with latest docker image - GoTestWAF v0.4.0.