kube-owasp-zap is an owasp-zap solution for Kubernetes. It allows you to perform a vulnerability analysis on a host using Kubernetes as the platform. It creates a Job that deploys a pod that will scan the host for any vulnerabilities.
The setup guide will help you perform an owasp-zap scan using Kubernetes.
- Deploy the kube-owasp-zap chart with the values set for type of scan and target host
> helm install ./kube-owasp-zap --name vuln-scan \
--namespace owasp-zap \
--set zapcli.debug.enabled=true \
--set zapcli.spider.enabled=true \
--set zapcli.recursive.enabled=true \
--set zapcli.targetHost=[ URL to scan ]- Deploy using Helm repository
helm repo add simplyzee https://charts.simplyzee.dev
helm install simplyzee/kube-owasp-zap --name vuln-scan \
--namespace owasp-zap \
--set zapcli.debug.enabled=true \
--set zapcli.spider.enabled=true \
--set zapcli.recursive.enabled=true \
--set zapcli.targetHost=[ URL to scan ]This will deploy a Job that will deploy a pod on the Kubernetes platform that will perform the vulnerability scan.
Still ALOT of work around platform improvements with Kubernetes but it utilises the Kubernetes platform well to scan sites from a vulnerability analysis perspective.
Ideas to implement:
- Easier way of viewing scanning analysis
- Zap CLI to be more configurable as a tool on the k8s platform
Please raise an issue or pull request if you have any issues, questions or features.