OWASP ZAP Active Scanner Agent

Runs OWASP ZAP active security scans via the ZAP API daemon with custom scan policies. Generates SARIF reports compatible with GitHub Advanced Security code scanning alerts.

Installation

Requirements and caveats from upstream:

• 

Basic usage or getting-started notes:

• 

• Source: https://github.com/zaproxy/zaproxy

• Extracted from upstream docs: https://raw.githubusercontent.com/zaproxy/zaproxy/HEAD/README.md

Documentation

• https://www.zaproxy.org/docs/

Source

• Agent Skill Exchange