Hi there
I was exploring ZAP for a while and in my opinion Automation Framework provides more flexibility and granularity. I'm also intrigued by the simplicity and power of scan hooks from the packaged scan world.
So my question is it possible to use scan hooks along with Automation Framework? If not, is there any option to leverage the APIs while running AF?
A bit of background:
1. I have my own enterprise-approved base image with zap installed. My plan is to run zap with AF using CLI options.
2. While the scan runs, I must fetch the scan metadata and stats for observability.
It could be as simple as fetching the time taken for the scan to complete, which will help us to tune and tweak the scans accordingly.
This is where I think something like scan hooks can be very helpful. My observation was that I cannot access the APIs while running in -cmd mode, which is a requirement for AF.
Any help will be appreciated. Thanks in advance.