zaproxy - API scan - how to point a specification file

Question

I have a specification file api.yaml As I understand I should use it like the following:

docker run -t owasp/zap2docker-weekly zap-api-scan.py -t api.yaml -f openapi

Should I put the file to some zap's directory?

Omer Levi Hevroni · Accepted Answer · 2018-03-12 10:46:08Z

2

It's more like a docker question: The file needs to be accessible inside the container, so you'll need to mount a volume (e.g. the folder containing this file) - check out the documentation for more details. Than, you can use the file using the mount point, for example:

docker run -v /path/to/dir:/app/config -t owasp/zap2docker-weekly zap-api-scan.py -t /app/config/api.yaml -f openapi

answered Mar 12, 2018 at 10:46

Omer Levi Hevroni

2,0071 gold badge18 silver badges36 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Alex Over a year ago

thank you! I converted yaml spec to json and use it the following way:

docker run -v /etc/hosts:/etc/hosts -v $(pwd):/zap/wrk:rw -t owasp/zap2docker-weekly zap-api-scan.py -t apitest.json -f openapi

Omer Levi Hevroni Over a year ago

There is a simpler docker solution than mounting /etc/hosts': check out --add-host`, see the documentation here. Besides that, I glad I was able to help! If you need more Zap help don't hesitate to reach out!

Collectives™ on Stack Overflow

zaproxy - API scan - how to point a specification file

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related