How can I integrate OWASP ZAP into my CI/CD pipeline?

How can I integrate OWASP ZAP into my CI/CD pipeline?

Integrating OWASP ZAP into your CI/CD pipeline can enhance your security testing. You can use ZAP's API to automate scans.

What tools do I need to set this up?

You'll need OWASP ZAP installed, a CI/CD tool like Jenkins or GitLab CI, and possibly a scripting language like Python.

Can you provide a sample script for Jenkins?

Sure! Here's a simple Jenkins pipeline script that runs ZAP:

pipeline {
    agent any
    stages {
        stage('ZAP Scan') {
            steps {
                script {
                    sh 'zap.sh -cmd -quickurl http://yourapp.com -quickout report.html'
                }
            }
        }
    }
}