Omer Levi Hevroni comments

Results 167 comments of


                                            Omer Levi Hevroni

Docker ZAP integrated with OWASP Glue

Sorry, there was a bug in the pattern - just fixed it in OWASP/glue#153 :) Test the new pattern, please?

Docker ZAP integrated with OWASP Glue

I did - take a look at the PR :)

Docker ZAP integrated with OWASP Glue

Actually - I'm not sure. Try just `localhost:8080`?

Docker ZAP integrated with OWASP Glue

Look like a TLS issue, does your Jira server has a valid TLS certificate?

Docker ZAP integrated with OWASP Glue

That's weird because the error: ``` SSL_connect returned = 1 errno = 0 state = error: certificate verify failed ``` Look like a TLS issue... Do you run glue inside...

Docker ZAP integrated with OWASP Glue

Can you try that outside the docker container? And can you test your website using tools like SSLLabs?

Docker ZAP integrated with OWASP Glue

Sounds like a PR?

Docker ZAP integrated with OWASP Glue

So file an issue please?

--exclude not working with SFL?

Looking at the [SFL task code](https://github.com/OWASP/glue/blob/bb5d5a7cad9aee9120f48fea8b988d8894e81552/lib/glue/tasks/sfl.rb#L63), I think the `--exclude` flag is not honored. Looking on other tasks, look like some tasks do hard-coded exclude (Snyk, NSP) - ignoring folders...

--exclude not working with SFL?

I agree, we should move on and remove this option globally. While I try to look into that (not promise anything, but hope to have sometime later this week) -...