lightspeed-operator/ols-rapidast-config.yaml at main · openshift/lightspeed-operator · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
config:
  configVersion: 5

application:
  shortName: "ols-bundle"
  url: "https://$HOST/"


general:
  container:
    type: "none"

scanners:
  zap_authenticated:
    authentication:
      type: "http_header"
      parameters:
        name: "Bearer"
        value: "$BEARER_TOKEN"
  zap:
    apiScan:
      apis:
        apiUrl: "https://$HOST/openapi.json"

    spider:
      maxDuration: 0 # in minutes, default: 0 unlimited
      url: ""        # url to start spidering from, default: application.url set above

    passiveScan:
      disabledRules: "2,10015,10027,10096,10024"

    activeScan:
      policy:  "API-scan-minimal"

    container:
      parameters:
        executable: "zap.sh"  # for Linux

    miscOptions:
      # enableUI (default: false), requires a compatible runtime (e.g.: flatpak or no containment)
      enableUI: False
      # Defaults to True, set False to prevent auto update of ZAP plugins
      updateAddons: False

    report:
      format: ["json"]