Allow for modern and plus type of reports about zaproxy HOT 9 CLOSED

For my two cents: If you want more flexibility use an automation mechanism that's built for more flexibility like the API or automation framework.

That is the workaround, and tbh the recommended approach.

from zaproxy.

Just discussed this in irc.

This can be achieved in docker using either:

• Automation Framework (the recommended option)
• Scan Hooks

The packaged scans already have lots of command line options and we do not want to add to them.

from zaproxy.

See https://www.zaproxy.org/docs/automate/automation-framework/ - lots of v specific videos linked off there too 😁
You can create and test an AF plan in ZAP before exporting it to use on the command line, and that is indead the recommended approach.

from zaproxy.

Are you talking about the packaged scans or something else?
If its something else then I'm not sure I follow you...

from zaproxy.

For my two cents: If you want more flexibility use an automation mechanism that's built for more flexibility like the API or automation framework.

from zaproxy.

I'm talking about the reports, yes for the Python packaged scans (baseline, api, full), because they are only generated for the traditional templates

from zaproxy.

I'm using the Docker image for automation, it is very convenient.
What I lack is details about the passed tests in the reports.
I found that such information is only displayed in the traditional-html-plus and modern report templates, but the templates are hardcoded when we ask for -r my_report.html.
Thus, I'd like a way to decide what template to use.

All these templates are already stored in the /zap/plugins/reports.zap library within the Docker image.

from zaproxy.

Understood.
But note that the Automation Framework does already support all of the report types and can be used in the Docker images.

from zaproxy.

Thanks @psiinon ,

If I understand correctly it means creating my custom yaml instead of using the auto generated by each of the pre-packaged scans, right?

is there any templating or tool I can use to generate it?

from zaproxy.