Security/Pen Testing: A guide to run OWASP Zap headless in containers for CI/CD pipeline

Introduction

OWASP ZAP is one of the world’s most popular free security tools which can help you find security vulnerabilities in web applications and APIs. It allows you to catch HTTP traffic via locally configured proxy. Traffic can then be used to modify requests in order to exploit an application…