baseline-scan.py with report template

66 views
Skip to first unread message

Yannis Nikoloudakis

unread,
Jan 31, 2024, 4:00:20 AM1/31/24
to ZAP User Group
I am trying to deploy zap server as a GCP cloud run job.
Thus, I am using the zap docker image and run the baseline-scan.py to run a passive scan.
target site and other settings are passed through environment variables.
Is there a way to "instruct" baseline-scan.py to use a specific report template, e.g. traditional-json-plus?


thc...@gmail.com

unread,
Jan 31, 2024, 4:28:35 AM1/31/24
to zaprox...@googlegroups.com
Hi,

That's not supported by default, you would have to use scan hooks:
https://www.zaproxy.org/docs/docker/scan-hooks/
e.g. in zap_pre_shutdown.
(The zap parameter is the Python ZAP API Client,
https://github.com/zaproxy/zap-api-python)

and then call the reports API:
https://www.zaproxy.org/docs/desktop/addons/report-generation/api/

Best regards.
Reply all
Reply to author
Forward
0 new messages