Help building ZAP weekly from source in a container

[Thomas Spear]

Hi,

I wanted to post this on the zap developers group but I seem not to have permissions to post over there, so I'm posting here.

I decided I wanted to try building the ZAP weekly release from source this week while waiting for the update to Apache commons-text to reach the weekly binary release.

I'm on a Mac, so I thought in order to build a docker image that I can use in our environment, I'd do it by shelling into a local container and running through the build steps.

I haven't built a java project from source before so I started reading the docs.

I've started container running the eclipse-temurin image on the command line and opened a shell inside. Ultimately I would like to build the weekly release's zip file in this container so I can simply copy the zip to an image using the build process we already have, which is based on the main Dockerfile-weekly manifest, just as if your CI pipeline had built the zip and published it.

I've seen that the docs say to run ./gradlew run in order to run ZAP from source. Seeing that, I thought I'd reach out for some guidance because I am not wanting to run ZAP from this container, just simply build it from source into a zip file that I can copy over and extract.

Looking through the github workflow, I saw that it uses different gradle tasks than the docs, so I wanted to reach out to see what the proper process is for building the weekly release ZAP zip.

Thanks in advance.

[thc...@gmail.com]

Hi.

Anyone can post to the dev group. Are you seeing an error?


That guide is for developers wanting to work on ZAP, you don't need
Eclipse or any IDE to build the weekly.

The required steps to build the ZAP packages are mentioned in:
https://github.com/zaproxy/zaproxy/blob/main/BUILDING.md

For the weekly simply clone the zaproxy repository and run the Gradle task:
:zap:distWeekly

(The doc also mentions where the ZIP will be placed.)

Best regards.

On 16/10/2022 20:46, Thomas Spear wrote:
> Hi,
>
> I wanted to post this on the zap developers group but I seem not to have
> permissions to post over there, so I'm posting here.
>
> I decided I wanted to try building the ZAP weekly release from source this
> week while waiting for the update to Apache commons-text to reach the
> weekly binary release.
>
> I'm on a Mac, so I thought in order to build a docker image that I can use
> in our environment, I'd do it by shelling into a local container and
> running through the build steps.
>
> I haven't built a java project from source before so I started reading the

> docs <https://www.zaproxy.org/docs/developer/quick-start-build/>.

[Thomas Spear]

I think I was just really tired earlier. I apparently hadn't joined the group, but I joined now and I can post.

I appreciate the quick pointer to the BUILDING.md. I'm working on the build now.

Thanks again