Dynamic Application Security Testing with ZAP and GitHub Actions

Fri, 15 May 2020 00:00:00 +0000

ZAP full scan GitHub action provides free dynamic application security testing (DAST) of your web applications. DAST is also known as black-box testing, which allows ZAP to identify potential vulnerabilities in your web applications. We previously introduced the ZAP baseline scan GitHub action to passively identify potential alerts in a web application. However, unlike the baseline scan, ZAP full scan attacks the web application to find additional vulnerabilities.

Automate Security Testing with ZAP and GitHub Actions

Thu, 09 Apr 2020 00:00:00 +0000

With the increasing number of web application security breaches, it is essential to keep your web application secure at all times. Furthermore having security integrated into your CI/CD pipeline (DevSecOps) will become a lifesaver if you are actively developing the application. To cater to this need ZAP provides a baseline scan feature to find common security faults in a web application without doing any active attacks.

Nirojan on ZAP

Dynamic Application Security Testing with ZAP and GitHub Actions

Automate Security Testing with ZAP and GitHub Actions