Practical Security Automation and Testing

Step 3 – generate a report

There are a few ways we can generate an OWASP ZAP report. The first is to use alerts to show a summary list of the security issues:

$ zap-cli alerts

Furthermore, we can also use report to generate a detailed HTML or XML report. The XML report can be used to import into other security reporting tools, which we will introduce in Chapter 15, Summary of Automation Security Testing Tips:

$ zap-cli report -o   ZAP_Report.html  -f html

To generate the XML format report, execute this command:

$ zap-cli report -o ZAP_Report.xml -f xml

Uses of ZAP-CLI or ZAP RESTful API to automate the OWASP ZAP scan? The ZAP RESTful API is provided by default in ZAP, while the ZAP-CLI will require to install zapcli. If you only need basic ...