Zap in a GitHub Workflow....

[Vern Halen]

Hi!

I have Zap running in a GitHub workflow though I don't know how effectively.  It succeeds and uploads a report, however, it doesn't run long and the report seems to be a summary.  The results don't match a run from the desktop either.  It uses the zaproxy/action-f...@v0.12.0 action.  I've attached CI and Desktop logs and yml file in the hopes it may help someone pinpoint the issue(s).  Any help is super apprectiated!!

[kingthorin+zap]

Make sure the two or doing precisely the same thing against precisely the same target setup.

Which they likely aren't.

[Vern Halen]

That's exactly where I'm at.... determining how to match up scans.  They are both hitting the same URL, but the ZAP options are more than likely different.  So I guess maybe the question is, how do I ensure the options are matched up?

--
ZAP by Checkmarx: https://www.zaproxy.org/
---
You received this message because you are subscribed to the Google Groups "ZAP User Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to zaproxy-user...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/zaproxy-users/68a0fe8c-c44b-452b-a3cf-7c1794b8b723n%40googlegroups.com.