The OWASP ZAP role

Now that we have covered the basics of how to run a container using Ansible in the WPScan role, creating the role that runs OWASP ZAP should be straightforward; we just use this command:

$ ansible-galaxy init roles/zap

Open Web Application Security Project Zed Attack Proxy or OWASP ZAP, to give it its full name, is an open source web application security scanner.

The defaults for the role in roles/zap/defaults/main.yml should contain this code:

image: "owasp/zap2docker-stable"log:  remote_folder: /tmp/zap/  local_folder: "generated/"  file: "{{ ansible_date_time.date }}-{{ ansible_date_time.hour }}-{{ ansible_date_time.minute }}.html"

As you can see, we are using the owasp/zap2docker-stable image and also we are using the ...

Get Learn Ansible now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.