Automation Framework

The new Automation Framework will in time replace the Command Line and Packaged Scan options. It allows you to control ZAP via one YAML file and provides more flexibility while not being tied to any specific container technology.

The Automation Framework in included with ZAP 2.11.0 as well as the stable docker image. The framework is plugable and many of the existing add-ons have been enhanced to support it.

Important: if you run the framework from the command line you should not use the -addonupdate option or the addOns updateAddOns option - this has been found to cause problems when updating add-ons which are defined in the current plan. The recommended approach is to run ZAP inline once to update all of the add-ons and then again to run the plan, e.g.:

    ./ -cmd -addonupdate
    ./ -cmd -autorun zap.yaml <any other ZAP options>

A longer term solution is being worked on.

For details of how to get started with the framework see the main framework help page.

The full set of jobs currently supported by the framework are:

For details of future changes planned see the tracker issue.