kasunkv/owasp-zap-vsts-task

Report Generator -Not generating HTML report and it is running Active Scan when checkbox is unchecked

Opened this issue · 1 comments

Hi,

We love your plugin but unfortunately it is not working correctly.

  1. We have unchecked the checkbox for "Active Scan" but it still does an Active Scan
  2. It indicated report is generated, but we check the default release folder, there is nothing there and we search throughout the drive, there is no such file

Logs
2018-07-24T07:26:19.9199822Z ##[section]Starting: OWASP ZAP Scan
2018-07-24T07:26:19.9461744Z ==============================================================================
2018-07-24T07:26:19.9461930Z Task : OWASP Zed Attack Proxy Scan
2018-07-24T07:26:19.9462059Z Description : Visual Studio Team Services build/release task for running OWASP ZAP automated security tests
2018-07-24T07:26:19.9462181Z Version : 2.0.7
2018-07-24T07:26:19.9462291Z Author : Kasun Kodagoda
2018-07-24T07:26:19.9462405Z Help : More Information
2018-07-24T07:26:19.9462607Z ==============================================================================
2018-07-24T07:26:21.0420206Z OWASP ZAP Spider Scan Initiated. ID: 1
2018-07-24T07:26:30.8562899Z Spider Scan In Progress: 100%
2018-07-24T07:26:30.8563564Z Spider Scan Complete.
2018-07-24T07:26:30.8564092Z ---------------------------------------
2018-07-24T07:26:30.8567346Z Generating the report...
2018-07-24T07:26:30.9670253Z
2018-07-24T07:26:30.9670728Z **************************
2018-07-24T07:26:30.9671173Z * Active Scan Result *
2018-07-24T07:26:30.9671572Z **************************
2018-07-24T07:26:30.9671872Z
2018-07-24T07:26:30.9672211Z --------------------------
2018-07-24T07:26:30.9672602Z | Alert Type | Count |
2018-07-24T07:26:30.9673009Z --------------------------
2018-07-24T07:26:30.9673416Z High Risk | 0
2018-07-24T07:26:30.9673742Z Medium Risk | 2
2018-07-24T07:26:30.9674123Z Low Risk | 3
2018-07-24T07:26:30.9674499Z Info Risk | 0
2018-07-24T07:26:30.9674898Z __________________________
2018-07-24T07:26:30.9808444Z ##[section]Finishing: OWASP ZAP Scan

Settings Set
image

image

@er1csg I will look in to this issue ASAP. I should be able to give an update about the issue and may be a fix for the issue by the end of this weekend. Thank you for using the task.