nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How can I integrate OWASP ZAP in the Bitbucket Pipelines?

Gabriel Moraes Pacheco de Oliveira

I am fairly new to these issues and was wondering if it is possible to integrate OWASP ZAP with my bitbucket pipelines and break the build if any issue appear.

Can someone send me an example of a template? Or something I can study or read to understand more about pipelines.

My OWASP ZAP instance is installed on an ubuntu server.

I'm trying to build a open-source CI/CD (OWASP Dependency Check, Horusec, OWASP ZAP) and if anyone has any open-source SCA/SAST/DAST ideas, feel free to suggest them.

Accepted answers

Oleksandr Kyrdan

Hi @Gabriel Moraes Pacheco de Oliveira

Thank your for your question!

For the integration Bitbucket Pipelines provides Bitbucket Pipes. So you could build powerful, automated continuous integration and continuous deployment workflows in a plug and play fashion.

12 days of CI/CD blog posts series explain and provide details how to use and how to create your custom integration with Bitbucket Pipes.

Feel free to share your idea with our community to help you.

Best regards,
Oleksandr Kyrdan

All comments

Oleksandr Kyrdan

Hi @Gabriel Moraes Pacheco de Oliveira

Thank your for your question!

For the integration Bitbucket Pipelines provides Bitbucket Pipes. So you could build powerful, automated continuous integration and continuous deployment workflows in a plug and play fashion.

12 days of CI/CD blog posts series explain and provide details how to use and how to create your custom integration with Bitbucket Pipes.

Feel free to share your idea with our community to help you.

Best regards,
Oleksandr Kyrdan

ABhaskar

@Gabriel Moraes Pacheco de Oliveira did you find any solution to integrate OWASP ZAP with bitbucket pipelines ? without having to create your own pipe?

Abhinay Sutrakar

@Gabriel Moraes Pacheco de Oliveira @ABhaskar @Oleksandr Kyrdan - Did anyone of you able to integrate and run the scan succesfully with OWASP zap.

For me post scan the pipeline is running endless and ending with timeout.

Sathish Kumar Reddy_95abp2

im able to run the dependency check of owasp but its not the bitbucket pipe they provide, its script that i made.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

cloud

bitbucket

bitbucket-cloud

bitbucket-pipelines

security