OWASP ZAP scan error using Azure DevOps

319 views

Skip to first unread message

Zeke Carrillo

unread,

Feb 23, 2021, 7:00:36 PM2/23/21

to OWASP ZAP User Group

I have an Azure DevOps pipeline that has a "OWASP ZAP Scan" task in it.

Under ZAP API Configuration I have the-

ZAP API Url - configured with the FQDN of the Server that has OWASP ZAP on it
API Key which was obtained from OWASP ZAP (under TOOLS, OPTIONS, API)
Target URL - That has site to be tested

When the pipeline is executed when it gets to the task it comes up with -
##[error]Task Failed. Error: {"Success":false,"Message":"Error: connect ECONNREFUSED 127.0.0.1:8090"}

When I start a browser session on the Server (that is specified in the ZAP API Url) and type 127.0.0.1:8090 if comes up with the Welcome screen indicating that the OWASP Zed Attack Proxy (ZAP) is running.

At a bit of a loss as we have Pipeline task configured as required.

Simon Bennetts

unread,

Feb 24, 2021, 4:27:27 AM2/24/21

to OWASP ZAP User Group

Have a look in the zap.log file and see if there are any errors logged: https://www.zaproxy.org/faq/somethings-not-working-what-should-i-do/#check-the-log-file

What response do you get when you try accessing that URL via curl on the command line?