Skip to content
This repository has been archived by the owner on Nov 8, 2022. It is now read-only.

Updated jenkins-slave-zap #45

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
26 changes: 15 additions & 11 deletions cicd/jenkins-slave-zap/centos/Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -7,17 +7,18 @@ RUN yum install -y epel-release && \
RUN yum install -y redhat-rpm-config \
make automake autoconf gcc gcc-c++ \
libstdc++ libstdc++-devel \
java-1.8.0-openjdk wget curl \
xmlstarlet git x11vnc gettext tar \
xorg-x11-server-Xvfb openbox xterm \
net-tools python-pip \
firefox nss_wrapper java-1.8.0-openjdk-headless \
java-1.8.0-openjdk-devel nss_wrapper git && \
wget curl git firefox \
xmlstarlet gettext tar \
x11vnc xorg-x11-server-Xvfb xterm \
openbox net-tools nss_wrapper \
python python-pip \
java-11-openjdk-headless java-11-openjdk java-11-openjdk-devel && \
yum clean all


# upgrade pip and install the latest dev version of the python API
RUN pip install --upgrade pip
RUN pip install zapcli
# Install latest dev version of the python API
RUN pip install python-owasp-zap-v2.4

RUN mkdir -p /zap/wrk
Expand All @@ -29,23 +30,26 @@ RUN mkdir -p /var/lib/jenkins/.vnc
COPY configuration/* /var/lib/jenkins/
COPY configuration/run-jnlp-client /usr/local/bin/run-jnlp-client

ENV JAVA_HOME /usr/lib/jvm/java-8-openjdk-amd64/
ENV JAVA_HOME /usr/lib/jvm/java-11-openjdk-amd64/
ENV PATH $JAVA_HOME/bin:/zap:$PATH
ENV ZAP_PATH /zap/zap.sh
ENV HOME /var/lib/jenkins

# Default port for use with zapcli
ENV ZAP_PORT 8080
ENV ZAP_PORT=8080

COPY policies /var/lib/jenkins/.ZAP/policies/
COPY .xinitrc /var/lib/jenkins/

WORKDIR /zap

ENV WEBSWING_VERSION=2.7.1

# Download and expand the latest stable release
RUN curl -s https://raw.githubusercontent.com/zaproxy/zap-admin/master/ZapVersions-dev.xml | xmlstarlet sel -t -v //url |grep -i Linux | wget -q --content-disposition -i - -O - | tar zx --strip-components=1 && \
curl -s -L https://bitbucket.org/meszarv/webswing/downloads/webswing-2.3-distribution.zip | jar -x && \
curl -s -L https://bitbucket.org/meszarv/webswing/downloads/webswing-${WEBSWING_VERSION}.zip | jar -x && \
touch AcceptedLicense
ADD webswing.config /zap/webswing-2.3/webswing.config
ADD webswing.config /zap/webswing-${WEBSWING_VERSION}/webswing.config

RUN chown -R root:root /zap && \
chown -R root:root /var/lib/jenkins && \
Expand Down
Loading