OWASP ZAP API Security Scanner

Automates OWASP ZAP scans against REST APIs using the ZAP Python API client. Imports OpenAPI/Swagger specs for targeted scanning and generates SARIF-format reports for GitHub Security tab integration.

Installation

Requirements and caveats from upstream:

Basic usage or getting-started notes:

• 

• Source: https://github.com/zaproxy/zaproxy

• Extracted from upstream docs: https://raw.githubusercontent.com/zaproxy/zaproxy/HEAD/README.md

Source

• Agent Skill Exchange