Application scanning component of purpleteam
Clone this repository.
cd to the repository root directory and run:
npm install
Copy the config/config.example.json to config/config.local.json.
Use the config/config.js for documentation and further examples.
Take the Zap API Key that you set-up in the purpleteam-s2-containers project and replace the <zap-api-key-here> value in the config.local.json file.
The following two values should be the same. They should also match the value of the orchestrator outcomes.dir:
slave.report.dir Configure this value. This needs to be a directory of your choosing that both the orchestrator and app-scanner containers use. The directory you choose and configure needs group rwx permissions applied to it becuase the orchestrator and tester containers share the same group, they also read, write and delete outcome files within this directory.
results.dir Configure this value. This needs to be a directory of your choosing that both the orchestrator and app-scanner containers use. The directory you choose and configure needs group rwx permissions applied to it becuase the orchestrator and tester containers share the same group, they also read, write and delete outcome files within this directory.