Resources Limit ( RAM ) from CLI

[Jim Papadimas]

Dear team,

We are currently experiencing an issue with the ZAP ( CLI - Automation Framework ) implementation in our CI/CD.

In a specific project it fails due the limit of resources with a JAVA out of memory error. Is there a way to limit the RAM usage of ZAP , as we can not allow unlimited usage.

Thank you in advance for your time and consideration.

[Simon Bennetts]

Er, get ZAP to do less? :)

ZAP is not currently designed for limited memory or disk space. Both are relatively cheap and so it is not a priority for us right now.

Try reducing the number of threads used by the spiders and active scanner.

Also try to avoid using browsers, e.g. via the AJAX Spider or DOM XSS scan rule.

That will make it much harder to test modern web apps, but browsers take up a LOT of memory, and I suspect you'll have even less luck getting browser makers to reduce their memory footprints ;)

Cheers,

Simon

[thc...@gmail.com]

And consider providing details (zap.log/exception stacktraces/…) of the
out of memory errors.

Best regards.