通讯技术>> cmc-security-scan>> 返回
项目作者： hmcts

项目描述 ：
ZAP security scanning automation for Civil Money Claims application
高级语言： Groovy
项目地址: git://github.com/hmcts/cmc-security-scan.git
创建时间： 2017-09-19T13:42:22Z
项目社区：https://github.com/hmcts/cmc-security-scan
开源协议：MIT License
下载


CMC Security Scan

This is the security scan using ZAP proxy.

Getting Started

Prerequisites

The following software needs to be installed:

Local environment setup

In addition to above, a link to integration tests should exist as security scan runs integration tests through ZAP proxy. Link can be created using the following command:

  1. $ ./bin/link-integration-tests-project.sh <path-to-integration-tests>

Starting dockerized environment

To start environment including ZAP proxy, Selenium Webdriver and CMC service stack please run the following command:

  1. $ ./bin/start-environment.sh

There is a convenience stop-environment script as well.

Run integration tests through ZAP proxy

To run integration tests through ZAP proxy in attack mode please run the following command:

  1. $ ./bin/run-integration-tests-scan.sh

Stopping dockerized environment

To stop environment including ZAP proxy, Selenium Webdriver and CMC service stack please run the following command:

  1. $ ./bin/stop-environment.sh

License

This project is licensed under the MIT License - see the LICENSE file for details.