← 输入框|github.com|刷新
Skip to content

zap-advanced: disable spider for API scanning #2508

Closed as not planned
Closed as not planned

Description

@hamza86

Hello guys,

I'm trying to integrate zap with secureboxcode (using zap-advanced) within our CD to test pentest our Rest API using using openapi zap feature. Looking at the default configuraiton of zap-advanced, it looks like that there is no way to disable spider which is not appropriate for rest API. Is there any way to disable for example scanner default configuration, spider default configuration etc.. ?
thanks in advance,
Hamza

Activity

  1. moved this from Backlog to Todo in secureCodeBoxon Jun 11, 2024
  2. J12934 commented on Jun 13, 2024

    @J12934
    Member

    Hi no that's currently not supported AFAIK. It's always started but you can tune how long it runs to stop after a minute or so.

    FYI (here too) zap advanced is going to deprecated soon. Recommendation is to start adopting Zap Automation Framework as soon as possible. See PR #2387

    Will close this as not planned as we won't change it as it possible with the automation framework.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

questionFurther information is requested

Type

No type

Projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions