Skip to content

Update ZAP to 2.16.1 #2964

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
J12934 merged 4 commits into from
Apr 3, 2025
Merged

Update ZAP to 2.16.1 #2964

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
1f2477c
Upgrading zap from 2.16.0 to 2.16.1
secureCodeBoxBot Mar 26, 2025
6afa38b
Upgrading zap-automation-framework from 2.16.0 to 2.16.1
secureCodeBoxBot Mar 26, 2025
48fcf4e
Upgrading zap-advanced from 2.16.0 to 2.16.1
secureCodeBoxBot Mar 26, 2025
98b7edc
Migrate ZAP docker repo away from now deprecated softwaresecurityproj…
J12934 Apr 1, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion scanners/zap-advanced/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ description: A Helm chart for the ZAP (extended with advanced authentication fea
type: application
# version - gets automatically set to the secureCodeBox release version when the helm charts gets published
version: v3.1.0-alpha1
appVersion: "2.16.0"
appVersion: "2.16.1"
kubeVersion: ">=v1.11.0-0"
annotations:
versionApi: https://api.github.com/repos/zaproxy/zaproxy/releases/latest
Expand Down
4 changes: 2 additions & 2 deletions scanners/zap-advanced/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: "ZAP Advanced"
category: "scanner"
type: "WebApplication"
state: "released"
appVersion: "2.16.0"
appVersion: "2.16.1"
usecase: "WebApp & OpenAPI Vulnerability Scanner extend with authentication features"
---

Expand Down Expand Up @@ -524,7 +524,7 @@ zapConfiguration:
| zapContainer.envFrom | list | `[]` | Optional mount environment variables from configMaps or secrets (see: https://kubernetes.io/docs/tasks/inject-data-application/distribute-credentials-secure/#configure-all-key-value-pairs-in-a-secret-as-container-environment-variables) |
| zapContainer.extraVolumeMounts | list | `[{"mountPath":"/home/zap/.ZAP_D/scripts/scripts/authentication/","name":"zap-scripts-authentication","readOnly":true},{"mountPath":"/home/zap/.ZAP_D/scripts/scripts/session/","name":"zap-scripts-session","readOnly":true}]` | Optional VolumeMounts mapped into each scanJob (see: https://kubernetes.io/docs/concepts/storage/volumes/) |
| zapContainer.image.pullPolicy | string | `"IfNotPresent"` | Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images |
| zapContainer.image.repository | string | `"softwaresecurityproject/zap-stable"` | Container Image to run the scan |
| zapContainer.image.repository | string | `"docker.io/zaproxy/zap-stable"` | Container Image to run the scan |
| zapContainer.image.tag | string | `nil` | defaults to the charts appVersion |
| zapContainer.resources | object | `{}` | CPU/memory resource requests/limits (see: https://kubernetes.io/docs/tasks/configure-pod-container/assign-memory-resource/, https://kubernetes.io/docs/tasks/configure-pod-container/assign-cpu-resource/) |
| zapContainer.securityContext.allowPrivilegeEscalation | bool | `false` | |
Expand Down
2 changes: 1 addition & 1 deletion scanners/zap-advanced/docs/README.ArtifactHub.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -529,7 +529,7 @@ zapConfiguration:
| zapContainer.envFrom | list | `[]` | Optional mount environment variables from configMaps or secrets (see: https://kubernetes.io/docs/tasks/inject-data-application/distribute-credentials-secure/#configure-all-key-value-pairs-in-a-secret-as-container-environment-variables) |
| zapContainer.extraVolumeMounts | list | `[{"mountPath":"/home/zap/.ZAP_D/scripts/scripts/authentication/","name":"zap-scripts-authentication","readOnly":true},{"mountPath":"/home/zap/.ZAP_D/scripts/scripts/session/","name":"zap-scripts-session","readOnly":true}]` | Optional VolumeMounts mapped into each scanJob (see: https://kubernetes.io/docs/concepts/storage/volumes/) |
| zapContainer.image.pullPolicy | string | `"IfNotPresent"` | Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images |
| zapContainer.image.repository | string | `"softwaresecurityproject/zap-stable"` | Container Image to run the scan |
| zapContainer.image.repository | string | `"docker.io/zaproxy/zap-stable"` | Container Image to run the scan |
| zapContainer.image.tag | string | `nil` | defaults to the charts appVersion |
| zapContainer.resources | object | `{}` | CPU/memory resource requests/limits (see: https://kubernetes.io/docs/tasks/configure-pod-container/assign-memory-resource/, https://kubernetes.io/docs/tasks/configure-pod-container/assign-cpu-resource/) |
| zapContainer.securityContext.allowPrivilegeEscalation | bool | `false` | |
Expand Down
2 changes: 1 addition & 1 deletion scanners/zap-advanced/tests/__snapshot__/scanner_test.yaml.snap
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -148,7 +148,7 @@ matches the snapshot:
- api.disablekey=true
env: []
envFrom: []
image: softwaresecurityproject/zap-stable:0.0.0
image: docker.io/zaproxy/zap-stable:0.0.0
imagePullPolicy: IfNotPresent
name: zap-sidecar
ports:
Expand Down
2 changes: 1 addition & 1 deletion scanners/zap-advanced/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -133,7 +133,7 @@ scanner:
zapContainer:
image:
# -- Container Image to run the scan
repository: softwaresecurityproject/zap-stable
repository: docker.io/zaproxy/zap-stable
# -- defaults to the charts appVersion
tag: null
# -- Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
Expand Down
2 changes: 1 addition & 1 deletion scanners/zap-automation-framework/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ description: A Helm chart for the ZAP Automation Framework that integrates with
type: application
# version - gets automatically set to the secureCodeBox release version when the helm charts gets published
version: v3.1.0-alpha1
appVersion: "2.16.0"
appVersion: "2.16.1"
kubeVersion: ">=v1.11.0-0"
annotations:
versionApi: https://api.github.com/repos/zaproxy/zaproxy/releases/latest
Expand Down
4 changes: 2 additions & 2 deletions scanners/zap-automation-framework/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: "ZAP Automation Framework"
category: "scanner"
type: "WebApplication"
state: "released"
appVersion: "2.16.0"
appVersion: "2.16.1"
usecase: "WebApp & OpenAPI Vulnerability Scanner"
---

Expand Down Expand Up @@ -495,7 +495,7 @@ Alternatively, have a look at the [official documentation](https://www.zaproxy.o
| scanner.extraVolumeMounts | list | `[{"mountPath":"/zap/wrk","name":"zap-workdir"},{"mountPath":"/zap/zap-entrypoint.bash","name":"zap-automation-framework-entrypoint","readOnly":true,"subPath":"zap-entrypoint.bash"}]` | Optional VolumeMounts mapped into each scanJob (see: https://kubernetes.io/docs/concepts/storage/volumes/) |
| scanner.extraVolumes | list | `[{"emptyDir":{},"name":"zap-workdir"},{"configMap":{"name":"zap-automation-framework-entrypoint"},"name":"zap-automation-framework-entrypoint"}]` | Optional Volumes mapped into each scanJob (see: https://kubernetes.io/docs/concepts/storage/volumes/) |
| scanner.image.pullPolicy | string | `"IfNotPresent"` | Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images |
| scanner.image.repository | string | `"softwaresecurityproject/zap-stable"` | Container Image to run the scan |
| scanner.image.repository | string | `"docker.io/zaproxy/zap-stable"` | Container Image to run the scan |
| scanner.image.tag | string | `nil` | defaults to the charts appVersion |
| scanner.nameAppend | string | `nil` | append a string to the default scantype name. |
| scanner.nodeSelector | object | `{}` | Optional nodeSelector settings that control how the scanner job is scheduled (see: https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes/) |
Expand Down
2 changes: 1 addition & 1 deletion scanners/zap-automation-framework/docs/README.ArtifactHub.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -500,7 +500,7 @@ Alternatively, have a look at the [official documentation](https://www.zaproxy.o
| scanner.extraVolumeMounts | list | `[{"mountPath":"/zap/wrk","name":"zap-workdir"},{"mountPath":"/zap/zap-entrypoint.bash","name":"zap-automation-framework-entrypoint","readOnly":true,"subPath":"zap-entrypoint.bash"}]` | Optional VolumeMounts mapped into each scanJob (see: https://kubernetes.io/docs/concepts/storage/volumes/) |
| scanner.extraVolumes | list | `[{"emptyDir":{},"name":"zap-workdir"},{"configMap":{"name":"zap-automation-framework-entrypoint"},"name":"zap-automation-framework-entrypoint"}]` | Optional Volumes mapped into each scanJob (see: https://kubernetes.io/docs/concepts/storage/volumes/) |
| scanner.image.pullPolicy | string | `"IfNotPresent"` | Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images |
| scanner.image.repository | string | `"softwaresecurityproject/zap-stable"` | Container Image to run the scan |
| scanner.image.repository | string | `"docker.io/zaproxy/zap-stable"` | Container Image to run the scan |
| scanner.image.tag | string | `nil` | defaults to the charts appVersion |
| scanner.nameAppend | string | `nil` | append a string to the default scantype name. |
| scanner.nodeSelector | object | `{}` | Optional nodeSelector settings that control how the scanner job is scheduled (see: https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes/) |
Expand Down
2 changes: 1 addition & 1 deletion scanners/zap-automation-framework/tests/__snapshot__/scanner_test.yaml.snap
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -94,7 +94,7 @@ matches the snapshot:
- /zap/zap-entrypoint.bash
env: []
envFrom: []
image: softwaresecurityproject/zap-stable:0.0.0
image: docker.io/zaproxy/zap-stable:0.0.0
imagePullPolicy: IfNotPresent
name: zap-automation-framework
resources:
Expand Down
2 changes: 1 addition & 1 deletion scanners/zap-automation-framework/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ parser:
scanner:
image:
# scanner.image.repository -- Container Image to run the scan
repository: softwaresecurityproject/zap-stable
repository: docker.io/zaproxy/zap-stable
# scanner.image.tag -- defaults to the charts appVersion
tag: null
# -- Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
Expand Down
2 changes: 1 addition & 1 deletion scanners/zap/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ description: A Helm chart for the ZAP security scanner that integrates with the
type: application
# version - gets automatically set to the secureCodeBox release version when the helm charts gets published
version: v3.1.0-alpha1
appVersion: "2.16.0"
appVersion: "2.16.1"
kubeVersion: ">=v1.11.0-0"
annotations:
versionApi: https://api.github.com/repos/zaproxy/zaproxy/releases/latest
Expand Down
4 changes: 2 additions & 2 deletions scanners/zap/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: "ZAP"
category: "scanner"
type: "WebApplication"
state: "released"
appVersion: "2.16.0"
appVersion: "2.16.1"
usecase: "WebApp & OpenAPI Vulnerability Scanner"
---

Expand Down Expand Up @@ -288,7 +288,7 @@ Alternatively, have a look at the [official documentation](https://www.zaproxy.o
| scanner.extraVolumeMounts | list | `[{"mountPath":"/zap/wrk","name":"zap-workdir"}]` | Optional VolumeMounts mapped into each scanJob (see: https://kubernetes.io/docs/concepts/storage/volumes/) |
| scanner.extraVolumes | list | `[{"emptyDir":{},"name":"zap-workdir"}]` | Optional Volumes mapped into each scanJob (see: https://kubernetes.io/docs/concepts/storage/volumes/) |
| scanner.image.pullPolicy | string | `"IfNotPresent"` | Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images |
| scanner.image.repository | string | `"softwaresecurityproject/zap-stable"` | Container Image to run the scan |
| scanner.image.repository | string | `"docker.io/zaproxy/zap-stable"` | Container Image to run the scan |
| scanner.image.tag | string | `nil` | defaults to the charts appVersion |
| scanner.nameAppend | string | `nil` | append a string to the default scantype name. |
| scanner.nodeSelector | object | `{}` | Optional nodeSelector settings that control how the scanner job is scheduled (see: https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes/) |
Expand Down
2 changes: 1 addition & 1 deletion scanners/zap/docs/README.ArtifactHub.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -293,7 +293,7 @@ Alternatively, have a look at the [official documentation](https://www.zaproxy.o
| scanner.extraVolumeMounts | list | `[{"mountPath":"/zap/wrk","name":"zap-workdir"}]` | Optional VolumeMounts mapped into each scanJob (see: https://kubernetes.io/docs/concepts/storage/volumes/) |
| scanner.extraVolumes | list | `[{"emptyDir":{},"name":"zap-workdir"}]` | Optional Volumes mapped into each scanJob (see: https://kubernetes.io/docs/concepts/storage/volumes/) |
| scanner.image.pullPolicy | string | `"IfNotPresent"` | Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images |
| scanner.image.repository | string | `"softwaresecurityproject/zap-stable"` | Container Image to run the scan |
| scanner.image.repository | string | `"docker.io/zaproxy/zap-stable"` | Container Image to run the scan |
| scanner.image.tag | string | `nil` | defaults to the charts appVersion |
| scanner.nameAppend | string | `nil` | append a string to the default scantype name. |
| scanner.nodeSelector | object | `{}` | Optional nodeSelector settings that control how the scanner job is scheduled (see: https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes/) |
Expand Down
8 changes: 4 additions & 4 deletions scanners/zap/tests/__snapshot__/scanner_test.yaml.snap
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -88,7 +88,7 @@ matches the snapshot:
- ../../home/securecodebox/zap-results.xml
env: []
envFrom: []
image: softwaresecurityproject/zap-stable:0.0.0
image: docker.io/zaproxy/zap-stable:0.0.0
imagePullPolicy: IfNotPresent
name: zap-baseline-scan
resources:
Expand Down Expand Up @@ -139,7 +139,7 @@ matches the snapshot:
- ../../home/securecodebox/zap-results.xml
env: []
envFrom: []
image: softwaresecurityproject/zap-stable:0.0.0
image: docker.io/zaproxy/zap-stable:0.0.0
name: zap-api-scan
resources:
foo: bar
Expand Down Expand Up @@ -187,7 +187,7 @@ matches the snapshot:
- ../../home/securecodebox/zap-results.xml
env: []
envFrom: []
image: softwaresecurityproject/zap-stable:0.0.0
image: docker.io/zaproxy/zap-stable:0.0.0
imagePullPolicy: IfNotPresent
name: zap-full-scan
resources:
Expand Down Expand Up @@ -234,7 +234,7 @@ matches the snapshot:
- -cmd
env: []
envFrom: []
image: softwaresecurityproject/zap-stable:0.0.0
image: docker.io/zaproxy/zap-stable:0.0.0
imagePullPolicy: IfNotPresent
name: zap-automation-scan
resources:
Expand Down
2 changes: 1 addition & 1 deletion scanners/zap/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ parser:
scanner:
image:
# scanner.image.repository -- Container Image to run the scan
repository: softwaresecurityproject/zap-stable
repository: docker.io/zaproxy/zap-stable
# scanner.image.tag -- defaults to the charts appVersion
tag: null
# -- Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
Expand Down
Loading