How to confirm that the authentication succeeded in GitLab CI/CD when using the automation framework ?

[Alexis]

Hello Everyone,

I've been trying to use the authentication feature with the automation framework, but for some reason I can't tell if the authentication succeeded or not.

As you can see in the pipeline screenshot, I can't tell whether the authentication worked or not.

You will find as an attachment both YAML files that I've been using. Is there anything wrong?

I have been doing all my tests on two different apps:

• https://juice-shop.herokuapp.com/#/search
• http://zero.webappsecurity.com/index.html

I've tried to use the GUI with the authentication tester, it does work, but the session does not persist. The browser closes after a few seconds after authentication.

Thanks in advance for your help.

Best regards,

Alexis

[Simon Bennetts]

Hi Alexis,

See https://www.zaproxy.org/docs/getting-further/automation/target-scanning-issues/#authentication-failures

We do plan to work on some better guidance, when we have time ..

Cheers,

Simon