mirror of
https://github.com/GSA/notifications-api.git
synced 2026-02-01 15:46:07 -05:00
Document how to run the owasp scan locally
This commit is contained in:
@@ -109,6 +109,15 @@ make bootstrap
|
|||||||
make test
|
make test
|
||||||
```
|
```
|
||||||
|
|
||||||
|
## To run a local OWASP scan
|
||||||
|
|
||||||
|
1. Run `make run-flask` from within the dev container.
|
||||||
|
2. On your host machine run:
|
||||||
|
|
||||||
|
```
|
||||||
|
docker run -v $(pwd):/zap/wrk/:rw --network="notify-network" -t owasp/zap2docker-weekly zap-api-scan.py -t http://dev:6011/_status -f openapi -c zap.conf
|
||||||
|
```
|
||||||
|
|
||||||
## To run scheduled tasks
|
## To run scheduled tasks
|
||||||
|
|
||||||
```
|
```
|
||||||
|
|||||||
Reference in New Issue
Block a user