run_active_scan
Run an active dynamic security scan on a web application by launching it with Docker Compose and using OWASP ZAP to identify vulnerabilities.
Instructions
Run an active dynamic scan (DAST) using OWASP ZAP.
Unlike SAST which only looks at code, this orchestrates spinning up the application via Docker Compose, waiting for it to be ready, and then running a ZAP dynamic baseline scan against the running instance.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| target_path | Yes | Path to the directory containing the docker-compose file. | |
| docker_compose_file | Yes | The name of the docker-compose file (e.g. docker-compose.yml). | |
| target_url | Yes | The URL of the target application once it's up (e.g. http://localhost:8080). |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |