Подробный рассказ с примером встраивания сканера безопасности веб-приложений OWASP ZAP (https://www.zaproxy.org/) в GitHub Actions.
DevSecOps goodness with Github actions and OWASP ZAP
https://www.youtube.com/watch?v=oXRdejqwBwc
Приложение в демке и примеры запуска Actions - https://github.com/we45/Vulnerable-Flask-App/actions
ЗЫ Статья на Medium с описанием как встроить ZAP в Azure Pipeline
How to run OWASP ZAP Security Tests Part of Azure DevOps CI/CD Pipeline
https://medium.com/@ganeshsirsi/how-to-run-owasp-zap-security-tests-part-of-azure-devops-ci-cd-pipeline-484da8793a12
Post #159
204
Forwarded from Технологический Болт Генона
YouTube Live Code Session - DevSecOps goodness with Github actions and OWASP ZAP In this Live Code session, Abhay Bhargav hosts a Live Code session on integrating OWASP ZAP as part of Github Actions. Orchestrate your Dynamic security (DAST) scans to detect vulnerabilities through ZAP. Website https://www.we45.com…