Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

adding a handy example showing how to automate the pentest within the CI pipeline #89

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

adding a handy example showing how to automate the pentest within the CI pipeline #89

wants to merge 1 commit into from

Commits on May 19, 2021

  1. adding a handy example showing how to automate the pentest within the… 

    … CI pipeline

This uses docker and docker-compose to run sandbox with sonarqube, zap tool and zap-sonar-plugin altogether in 3 steps :

1. run a sonarqube instance using docker with zap-sonar-plugin installed
2. generate a zapproxy.html report
3. publish the zapproxy.html report to sonarqube
    @newlight77
    newlight77 committed May 19, 2021
    Configuration menu
    Copy the full SHA
    b5d23b8 View commit details
    Browse the repository at this point in the history