integrating-dast-with-owasp-zap-in-pipeline

【开发与工程】This skill covers integrating OWASP ZAP (Zed Attack Proxy) for Dynamic Application Security Testing in CI/CD pipelines. It addresses configuring baseline, full, and API scans against running applications, interpreting ZAP findings, tuning scan policies, and establishing DAST quality gates in GitHub Actions and GitLab CI.

独立 GitHub 快照 · 自动分类 · 以原作者文档为准