Document how to run the owasp scan locally

This commit is contained in:
Ryan Ahearn
2022-08-23 16:59:39 -04:00
parent 2550464b8f
commit f90f32f032

View File

@@ -109,6 +109,15 @@ make bootstrap
make test make test
``` ```
## To run a local OWASP scan
1. Run `make run-flask` from within the dev container.
2. On your host machine run:
```
docker run -v $(pwd):/zap/wrk/:rw --network="notify-network" -t owasp/zap2docker-weekly zap-api-scan.py -t http://dev:6011/_status -f openapi -c zap.conf
```
## To run scheduled tasks ## To run scheduled tasks
``` ```