OWASP ZAP - 在 Gitlab CI/CD 中扫描后，启动的 ZAP 守护程序实例未通过 Python 关闭

Question

Initiating ZAP through Gitlab CLI as a Daemon

java -jar app.jar -daemon -dir $(pwd) &

Running the scan through python and Report is generated

After the scan completion, the Gitlab Linux box is still saying ZAPHost is listening on localhost:8080

I tried the zap.core.shutdown() but core is not being recognised at all even though all the necessary packages are installed.

Is running the ZAP as a daemon a problem since I am trying to shut it down from the python script?

Answer 1

That API call should do the trick. Are any other API calls failing? Are there any errors in the zap.log file?