Bilal k. Mohammed·Nov 4API-P-3: Scan for API Misconfigurations With ZAP, Weed Out False Positives, Then Fix ThemA practical workflow for finding misconfigurations with a scanner, separating real issues from false positives, and fixing what’s left.
Gayan Dissanayake·Oct 26DAST Inside GKE with OWASP ZAP and GitHub ActionsHow we added dynamic security testing to a private GKE cluster, scanned internal services without exposing them, and what broke along the…
MainEkHacker·Aug 12OWASP ZAP: A Complete Beginner’s Guide to Web Application Security TestingWhat is OWASP ZAP?
Muhammad Raafay Nouman·Jul 6Adding Image Scanning and DAST to a Jenkins Pipeline Without Losing a Week to ItA practitioner’s account of wiring OWASP ZAP and Trivy into an OpenShift + Jenkins delivery pipeline — including the dead ends, because the…
Jonathan Garcia·Mar 20Building and Securing a Silly Water Shop with Azure DevOps, Postman, and OWASP ZAPA hands-on DevSecOps project using Azure DevOps, Postman, App Service, Semgrep, and OWASP ZAP.
