What openapi/swagger definition versions are supported by zap-api-scan.py?

108 views
Skip to first unread message

Tom Niessink

unread,
Nov 23, 2017, 4:38:38 AM11/23/17
to OWASP ZAP User Group
Hi everybody,

I have an issue with zap-api-scan.py in my CI config. It seems to have problems finding URLs/endpoints from my openapi.json definition file. 


Any help would be greatly appreciated! 

Best regards,
Tom

thc...@gmail.com

unread,
Nov 23, 2017, 5:39:53 AM11/23/17
to zaprox...@googlegroups.com
Hi.

> What openapi/swagger versions are supported by the zap-api-scan.py script?

At the moment (version 7 of OpenAPI add-on) supports 1.2 and 2.0.


> Could it be that I'm doing something wrong in my swagger 2.0
definition file (so ZAP can't find my URL from it)?

The first exception indicates that ZAP is not properly processing the
definition (a bug in the add-on).

Would you mind raising an issue? [1]


[1] https://github.com/zaproxy/zaproxy/issues/new

Best regards.

Tom Niessink

unread,
Nov 23, 2017, 5:54:37 AM11/23/17
to OWASP ZAP User Group
Done: https://github.com/zaproxy/zaproxy/issues/4072

Op donderdag 23 november 2017 11:39:53 UTC+1 schreef thc202:

thc...@gmail.com

unread,
Nov 23, 2017, 5:56:05 AM11/23/17
to zaprox...@googlegroups.com
Thank you!

Best regards.
Reply all
Reply to author
Forward
0 new messages