How to add openapi addon and how to call the swagger.json url from ZAP-CLI

[Anil r]

HI All,

I have followed the following blog post https://zaproxy.blogspot.com/2017/04/exploring-apis-with-zap.html and now i am able to hit the swagger url page and all the API are getting scanned.

But my question is I am able to do that using UI, how can I achieve this using ZAP-CLI.

Steps in UI:

First ,I have added the openapi addon from market place.

Second, In tools tab I can see an option called 'import an open API definition from url

Third, I gave my swagger.json url 

Fourth, It had scanned all the API's and gave the result.

Now how can I achieve the same in CI/CD using ZAP-CLI.

[Simon Bennetts]

We have a packaged scan that does just that: https://github.com/zaproxy/zaproxy/wiki/ZAP-API-Scan

[Akshat Sehgal]

How use this using JAVA API?

[Simon Bennetts]

Haver a look at how the API packaged scan does it: https://github.com/zaproxy/zaproxy/blob/develop/docker/zap-api-scan.py#L367