Hello Ludovic,
I'm trying to set up ZAP under Jenkins using Selenium, but I cannot get the same results as ZAP GUI on my desktop.
General information :
- My webapp for testing is DVWA
- Capture a user sequence using Selenium plugin for Firefox
- Launch a ZAP scan (Default Profile using HIGH and INSANE) via GUI (firefox is wired to the ZAP proxy) using the same sequence, export results
- Doing the same thing using Jenkins, start ZAP proxy, configure Firefox to go through ZAP proxy, launch selenium tests, launch scans using the Zap plugin.
But it won't show me any High alerts (at least, it should show me an SQLI alert)
(cf: jenkins build logs attached)
Am I doing something wrong ?
EDIT : reports CI and Desktop added + job configuration
Cheers,
Farid.