Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

zap-full-scan Report File is not written after full scan completes. No errors reported in the console. baseline scan works fine. #8402

Open
1 task
chaoscode opened this issue Mar 15, 2024 · 4 comments

Comments

@chaoscode
Copy link

chaoscode commented Mar 15, 2024

Describe the bug

When running the report file is not written

Steps to reproduce the behavior

1: install docker desktop
2: run docker (docker run -v C:\user{username}\Desktop\Work:/zap/wrk/:rw -t ghcr.io/zaproxy/zaproxy:stable zap-full-scan.py -t https://www.{domain}.com/ -j {domain}_Full_report.json -g gen.conf -quickprogress -v)
3: observe no report file is written to the mounted path

Expected behavior

the file is written or the console outputs an error message explaining what happened

Software versions

I have tried docker desktop and TrueNAS Scale with this and the latest tag. I have the same issue. The file will not write to a mount.
I am using quite a few other scanners that all mount to this folder, and they are able to write the report files just fine.

Screenshots

image

Errors from the zap.log file

no log file exists in the home directory.

Additional context

I have used the touch command per the documentation to confirm that files are touched, and no errors are output by the console.

I have no issues with running the baseline scan and getting the report to write from the same docker.

Would you like to help fix this issue?

  • Yes
@chaoscode chaoscode added the bug label Mar 15, 2024
@chaoscode chaoscode changed the title Zaproxy Docker - Report File is not written after scan completes. No errors reported in the console. Zaproxy Docker - Report File is not written after full scan completes. No errors reported in the console. baseline scan works fine. Mar 15, 2024
@thc202 thc202 changed the title Zaproxy Docker - Report File is not written after full scan completes. No errors reported in the console. baseline scan works fine. zap-full-scan Report File is not written after full scan completes. No errors reported in the console. baseline scan works fine. Mar 15, 2024
@thc202 thc202 added the Docker label Mar 15, 2024
@kingthorin
Copy link
Member

kingthorin commented Mar 15, 2024

Exclude the -g, you shouldn't be generating the config on every run:
https://www.zaproxy.org/docs/docker/full-scan/#usage

Also quickprogress because you aren't using quickscan you're using a packaged scan.

@thc202
Copy link
Member

thc202 commented Mar 15, 2024

Just to confirm it's a typo, did you mean to use -J (instead of -j)?

@thc202
Copy link
Member

thc202 commented Mar 15, 2024

In any case we should definitely error on invalid command line args.

@kingthorin
Copy link
Member

kingthorin commented Mar 15, 2024

no log file exists in the home directory.

Nor should it. (ZAP home, not user home.)
https://www.zaproxy.org/faq/how-do-you-configure-zap-logging/

ZAP logs to a file called “zap.log” in the ZAP ‘home’ directory.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Development

No branches or pull requests

3 participants