Merge pull request #1315 from OWASP/hotfix-zap

Fix Zap workflow
OWASP · Apr 12, 2024 · bc98000 · bc98000
2 parents 3dde0f9 + bf03ef7
commit bc98000
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/.github/workflows/dast-zap-test.yml b/.github/workflows/dast-zap-test.yml
@@ -30,8 +30,8 @@ jobs:
           ZAP_AUTH_HEADER: "Authorization"
         with:
           allow_issue_writing: false
-          docker_name: "owasp/zap2docker-stable"
+          docker_name: "ghcr.io/zaproxy/zaproxy:stable"
           target: "http://localhost:8080"
           rules_file_name: config/zap/rule-config.tsv
           fail_action: true
-          cmd_options: '-z "-configFile /zap/wrk/config/zap/options.prop"'
+          cmd_options: '-z "-configFile /zap/wrk/config/zap/options.prop" -a'
diff --git a/config/zap/rule-config.tsv b/config/zap/rule-config.tsv
@@ -13,3 +13,5 @@
 10112	IGNORE	Session Management Response Identified
 10105	IGNORE	Authentication Credentials Captured
 90003	IGNORE	Sub Resource Integrity Attribute Missing
+10094	IGNORE	Base64 Disclosure
+90005	IGNORE	Sec-Fetch-Dest Header is Missing