owasp zap config v9

2026-06-13 10:25:25 +01:00
parent 5afbb57dcc
commit 5805011296
3 changed files with 24 additions and 19 deletions
@@ -62,17 +62,19 @@ jobs:
          mkdir -p qatests
          docker volume create zap-data
          
-          # A MAGIA ACONTECE AQUI: Escrevemos o ficheiro de configuração diretamente no volume!
-          docker run --rm -v zap-data:/zap/wrk alpine sh -c 'echo "FAIL_ON_SEVERITY: HIGH" > /zap/wrk/zap-baseline.conf'
+          # Mudei o nome para zap-rules.conf (já não estamos a fazer baseline)
+          docker run --rm -v zap-data:/zap/wrk alpine sh -c 'echo "FAIL_ON_SEVERITY: HIGH" > /zap/wrk/zap-rules.conf'
          
-          echo ">>> 4. Executar OWASP ZAP..."
+          echo ">>> 4. Executar OWASP ZAP (FULL SCAN + AJAX SPIDER)..."
+          # AQUI: zap-full-scan.py em vez de zap-baseline.py!
          docker run --user root --name zap-scanner \
            --network zap-net \
            -v zap-data:/zap/wrk/:rw \
-            -t ghcr.io/zaproxy/zaproxy:stable zap-baseline.py \
+            -t ghcr.io/zaproxy/zaproxy:stable zap-full-scan.py \
            -t http://apex-sandbox:3000 \
            -r report.html \
-            -I -c zap-baseline.conf || true
+            -j \
+            -I -c zap-rules.conf || true
            
          echo ">>> 5. Recolher o relatório HTML..."
          docker cp zap-scanner:/zap/wrk/report.html qatests/report.html || true