mirror of
https://github.com/GSA/notifications-api.git
synced 2026-02-03 18:01:08 -05:00
Document how to run the owasp scan locally
This commit is contained in:
@@ -109,6 +109,15 @@ make bootstrap
|
||||
make test
|
||||
```
|
||||
|
||||
## To run a local OWASP scan
|
||||
|
||||
1. Run `make run-flask` from within the dev container.
|
||||
2. On your host machine run:
|
||||
|
||||
```
|
||||
docker run -v $(pwd):/zap/wrk/:rw --network="notify-network" -t owasp/zap2docker-weekly zap-api-scan.py -t http://dev:6011/_status -f openapi -c zap.conf
|
||||
```
|
||||
|
||||
## To run scheduled tasks
|
||||
|
||||
```
|
||||
|
||||
Reference in New Issue
Block a user