Integrate ZAP in Bamboo Continuous Integration

[Mufaddal Manasawala]

I have been going through ZAP since past couple of days, it is indeed a very good tool to check vulnerabilities in web applications.

I have manually tested my web application using the ZAP GUI and ZAP attack option. I need to integrate ZAP in our Bamboo Continuous Integration process. Can anyone please help me out here, any articles, demos or videos will be helpful. I am new to build integration and testing. 

What are the steps of doing this?

Do any test scripts are required?

[b lakshmi]

Hi..We are also looking for the same solution.

Were you able to perform this? If so, kindly share your approach.

[thc...@gmail.com]

Hi.

There's an issue to add support for Bamboo (not that it helps much at
this point). [1]


[1] https://github.com/zaproxy/zaproxy/issues/3020

Best regards.

[lakshmi]

Thanks for the update. However able to spider and scan the target url using python script and create a bamboo task to connect to EC2 instance>run the script. 

[thc...@gmail.com]

OK. Thanks for the info.

Best regards.

[Saurabh Seth]

Can you share how the script looks like ?

Thanks