Add OWASP scanning

This commit is contained in:
Neil Martinsen-Burrell 2022-10-05 09:56:20 -05:00
parent 9f861b3c11
commit 690659c9ba
No known key found for this signature in database
GPG key ID: 6A3C818CC10D0184
3 changed files with 148 additions and 2 deletions

View file

@ -22,7 +22,7 @@ services:
# Tell Django where to find its configuration
- DJANGO_SETTINGS_MODULE=registrar.config.settings
# Set a local key for Django
- DJANGO_SECRET_KEY=feedabee
- DJANGO_SECRET_KEY=really-long-random-string-BNPecI7+s8jMahQcGHZ3XQ5yUfRrSibdapVLIz0UemdktVPofDKcoy
# Run Django in debug mode on local
- DJANGO_DEBUG=True
# Tell Django where it is being hosted
@ -71,3 +71,11 @@ services:
- app
profiles:
- pa11y
owasp:
image: owasp/zap2docker-weekly
command: zap-baseline.py -t http://app:8080 -c zap.conf -I -r zap_report.html
volumes:
- .:/zap/wrk/
links: ["app"]
profiles: ["owasp-scan"]