diff --git a/src/commands/scan.yml b/src/commands/scan.yml index dfddf05..4484e4e 100644 --- a/src/commands/scan.yml +++ b/src/commands/scan.yml @@ -2,6 +2,11 @@ description: > Scan with OWASP Zap and report results to Slack parameters: + auth_header: + default: "" + type: string + description: "Data content for the Authorization header" + endpoint: type: string description: "The endpoint which will be scanned by OWASP Zap" @@ -40,9 +45,11 @@ steps: --network=host \ -v $(pwd)/zap/home:/home/zap/:rw \ -v $(pwd)/zap/wrk:/zap/wrk/:rw \ + <<#parameters.auth_header>>-e ZAP_AUTH_HEADER_VALUE=<><> \ << parameters.owasp-zap-image >> \ << parameters.script >> \ -t "<< parameters.endpoint >>" \ + -I \ -J report.json \ -r report.html