zaproxy - API scan - how to point a specification file

1
votes

I have a specification file api.yaml As I understand I should use it like the following:

docker run -t owasp/zap2docker-weekly zap-api-scan.py -t api.yaml -f openapi

Should I put the file to some zap's directory?

1
zap

1 Answers

2
votes

It's more like a docker question: The file needs to be accessible inside the container, so you'll need to mount a volume (e.g. the folder containing this file) - check out the documentation for more details. Than, you can use the file using the mount point, for example:

docker run -v /path/to/dir:/app/config -t owasp/zap2docker-weekly zap-api-scan.py -t /app/config/api.yaml -f openapi