Skip to content

DAST creates the connection to the ZAP server

Cameron Swords requested to merge post-server-start-tasks into master

What does this MR do?

Moves the creation of the ZAP client from the ZAP Python scripts into the DAST Python scripts.

This MR includes creation of the following environment variables:

  • DAST_ZAP_CONNECT_SLEEP_SECONDS: The amount of seconds to wait between each connection attempt to the ZAP API,
  • DAST_ZAP_MAX_CONNECTION_ATTEMPTS: The amount of connection attempts to make to the ZAP API before aborting
  • DAST_PASSIVE_SCAN_MAX_WAIT_TIME: The amount of minutes to wait for the passive scan to complete

Previously, the -T option was being used for both the "timeout" for how long to wait for a connection and the timeout for how long a passive scan should take.

What are the relevant issue numbers?

gitlab-org/gitlab#218814 (closed)

Does this MR meet the acceptance criteria?

Edited by Cameron Swords

Merge request reports