generated from hmcts/spring-boot-template
-
Notifications
You must be signed in to change notification settings - Fork 3
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #338 from hmcts/RDCC-3077_fixed_nightly_job
fixed the security scan
- Loading branch information
Showing
1 changed file
with
5 additions
and
4 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,13 +1,14 @@ | ||
#!/usr/bin/env bash | ||
echo ${TEST_URL} | ||
export LC_ALL=C.UTF-8 | ||
export LANG=C.UTF-8 | ||
zap-api-scan.py -t ${TEST_URL}/v2/api-docs -f openapi -S -d -u ${SecurityRules} -P 1001 -l FAIL | ||
curl --fail http://0.0.0.0:1001/OTHER/core/other/jsonreport/?formMethod=GET --output report.json | ||
cat zap.out | ||
echo "ZAP has successfully started" | ||
export LC_ALL=C.UTF-8 | ||
export LANG=C.UTF-8 | ||
zap-cli --zap-url http://0.0.0.0 -p 1001 report -o /zap/api-report.html -f html | ||
zap-cli --zap-url http://0.0.0.0 -p 1001 alerts -l Informational --exit-code False | ||
mkdir -p functional-output | ||
chmod a+wx functional-output | ||
curl --fail http://0.0.0.0:1001/OTHER/core/other/jsonreport/?formMethod=GET --output report.json | ||
cp /zap/api-report.html functional-output/ | ||
zap-cli --zap-url http://0.0.0.0 -p 1001 alerts -l Informational --exit-code False | ||
|