Fix cascading-rules for zap-automation-framework

Reet00 · J12934 · commit 84dd56d6fbbd · 2025-06-14T22:18:34.000+02:00
The provided parameters were the same as for the zap-advanced and
therefore not compatible with the zap-automation-framework.

Signed-off-by: Samreet Singh &lt;samreet.singh@iteratec.com&gt;
diff --git a/scanners/zap-automation-framework/cascading-rules/http.yaml b/scanners/zap-automation-framework/cascading-rules/http.yaml
@@ -22,4 +22,17 @@ spec:
           state: open
   scanSpec:
     scanType: "zap-automation-framework"
-    parameters: ["-t", "http://{{$.hostOrIP}}:{{attributes.port}}"]
+    parameters:
+      - "-autorun"
+      - "/home/securecodebox/scb-automation/automation.yaml"
+    volumeMounts:
+      - name: zap-automation-framework-baseline-config  
+        mountPath: /home/securecodebox/scb-automation/automation.yaml
+        subPath: automation.yaml
+    volumes:
+      - name: zap-automation-framework-baseline-config  
+        configMap:
+          name: zap-automation-framework-baseline-config  
+    env: 
+      - name: TARGET_URL
+        value: "http://{{$.hostOrIP}}:{{attributes.port}}"
diff --git a/scanners/zap-automation-framework/cascading-rules/https.yaml b/scanners/zap-automation-framework/cascading-rules/https.yaml
@@ -18,4 +18,17 @@ spec:
           state: open
   scanSpec:
     scanType: "zap-automation-framework"
-    parameters: ["-t", "https://{{$.hostOrIP}}:{{attributes.port}}"]
+    parameters:
+      - "-autorun"
+      - "/home/securecodebox/scb-automation/automation.yaml"
+    volumeMounts:
+      - name: zap-automation-framework-baseline-config  
+        mountPath: /home/securecodebox/scb-automation/automation.yaml
+        subPath: automation.yaml
+    volumes:
+      - name: zap-automation-framework-baseline-config  
+        configMap:
+          name: zap-automation-framework-baseline-config  
+    env: 
+      - name: TARGET_URL
+        value: "https://{{$.hostOrIP}}:{{attributes.port}}"
diff --git a/scanners/zap-automation-framework/tests/__snapshot__/scanner_test.yaml.snap b/scanners/zap-automation-framework/tests/__snapshot__/scanner_test.yaml.snap
@@ -48,10 +48,21 @@ matches the snapshot:
               state: open
             category: Open Port
       scanSpec:
+        env:
+          - name: TARGET_URL
+            value: http://{{$.hostOrIP}}:{{attributes.port}}
         parameters:
-          - -t
-          - http://{{$.hostOrIP}}:{{attributes.port}}
+          - -autorun
+          - /home/securecodebox/scb-automation/automation.yaml
         scanType: zap-automation-framework
+        volumeMounts:
+          - mountPath: /home/securecodebox/scb-automation/automation.yaml
+            name: zap-automation-framework-baseline-config
+            subPath: automation.yaml
+        volumes:
+          - configMap:
+              name: zap-automation-framework-baseline-config
+            name: zap-automation-framework-baseline-config
   3: |
     apiVersion: cascading.securecodebox.io/v1
     kind: CascadingRule
@@ -68,10 +79,21 @@ matches the snapshot:
               state: open
             category: Open Port
       scanSpec:
+        env:
+          - name: TARGET_URL
+            value: https://{{$.hostOrIP}}:{{attributes.port}}
         parameters:
-          - -t
-          - https://{{$.hostOrIP}}:{{attributes.port}}
+          - -autorun
+          - /home/securecodebox/scb-automation/automation.yaml
         scanType: zap-automation-framework
+        volumeMounts:
+          - mountPath: /home/securecodebox/scb-automation/automation.yaml
+            name: zap-automation-framework-baseline-config
+            subPath: automation.yaml
+        volumes:
+          - configMap:
+              name: zap-automation-framework-baseline-config
+            name: zap-automation-framework-baseline-config
   4: |
     apiVersion: v1
     data:
