testowasp.yaml

trigger: none

variables:
  swaggerDefUrl: "https://capstonefinal.azurewebsites.net/" 
  definitionFormat: "openapi"
  buildConfiguration: "Test"
  webRepository: "capstonefinal"
  tag: "$(Build.BuildId)"
  publishAsTestResults: "variables.PublishTestResults"


jobs:
  - job: Run_Owasp_Zap_API_Scan
    pool:
      vmImage: "ubuntu-latest"

    steps:
          - task: CmdLine@2
            inputs:
              script: 'chmod 777 -R $(Build.ArtifactStagingDirectory)'
            displayName: "Set chmod permissions for ArtifactStagingDirectory"
          
          - script: |
              wget  -O $(Build.ArtifactStagingDirectory)/ZapTransform.ps1 "https://raw.githubusercontent.com/UKHO/owasp-zap-scan/master/src/ZapTransform.ps1"
            displayName: "Download ZapTransform.ps1 to ArtifactStagingDirectory"  
            
          - script: |
              wget  -O $(Build.ArtifactStagingDirectory)/ZapTransformTemplate.xslt "https://raw.githubusercontent.com/UKHO/owasp-zap-scan/master/src/ZapTransformTemplate.xslt"
            displayName: "Download ZapTransformTemplate.xslt to ArtifactStagingDirectory"      
        
          - task: CmdLine@2
            inputs:
              script: 'docker run --rm --mount type=bind,source=$(Build.ArtifactStagingDirectory),target=/zap/wrk/ -t owasp/zap2docker-stable zap-full-scan.py -t $(swaggerDefUrl) -g gen.conf -r OWASP-Zap-Report.html -x Report.xml || true'
            continueOnError: true
            displayName: "Run OWASP ZAP UI Full Scan"
        
          - task: CmdLine@2
            inputs:
              script:  docker run --rm --mount type=bind,source=$(Build.ArtifactStagingDirectory),target=/tmp/nunit/ --mount type=bind,source=$(Build.ArtifactStagingDirectory),target=/tmp/report/ mcr.microsoft.com/powershell:ubuntu-18.04 pwsh -File '/tmp/nunit/ZapTransform.ps1'
            displayName: "Create Nunit Test Report"
        
          - task: PublishTestResults@2
            inputs:
              testResultsFormat: 'NUnit'
              testResultsFiles: 'Converted-OWASP-ZAP-Report.xml'
              searchFolder: '$(Build.ArtifactStagingDirectory)'
            displayName: "Publish OWASP ZAP UI Test Report"
        
          - task: PublishBuildArtifacts@1
            inputs:
              PathtoPublish: '$(Build.ArtifactStagingDirectory)/OWASP-Zap-Report.html'
              ArtifactName: 'Owasp Zap HTML Report'
              publishLocation: 'Container'
            displayName: "Publish OWASP ZAP UI HTML Report"

      # - task: CmdLine@2
      #   inputs:
      #     script: "chmod 777 -R $(Build.ArtifactStagingDirectory)"
      #   displayName: "Set chmod permissions for ArtifactStagingDirectory"

      # - script: |
      #     wget  -O $(Build.ArtifactStagingDirectory)/ZapTransform.ps1 "https://raw.githubusercontent.com/UKHO/owasp-zap-scan/master/src/ZapTransform.ps1"
      #   displayName: "Download ZapTransform.ps1 to ArtifactStagingDirectory"

      # - script: |
      #     wget  -O $(Build.ArtifactStagingDirectory)/ZapTransformTemplate.xslt "https://raw.githubusercontent.com/UKHO/owasp-zap-scan/master/src/ZapTransformTemplate.xslt"
      #   displayName: "Download ZapTransformTemplate.xslt to ArtifactStagingDirectory"
      # - task: CmdLine@2
      #   inputs:
      #     script: "docker run --rm --mount type=bind,source=$(Build.ArtifactStagingDirectory),target=/zap/wrk/ -t owasp/zap2docker-stable zap-api-scan.py -t $(swaggerDefUrl) -f $(definitionFormat) -g gen.conf -r OWASP-Zap-Report.html -x Report.xml || true"
      #   continueOnError: true
      #   displayName: "Run OWASP ZAP API Scan"

      # - task: CmdLine@2
      #   inputs:
      #     script: docker run --rm --mount type=bind,source=$(Build.ArtifactStagingDirectory),target=/tmp/nunit/ --mount type=bind,source=$(Build.ArtifactStagingDirectory),target=/tmp/report/ mcr.microsoft.com/powershell:ubuntu-18.04 pwsh -File '/tmp/nunit/ZapTransform.ps1'
      #   displayName: "Create Nunit Test Report"

      # - task: PublishTestResults@2
      #   inputs:
      #     testResultsFormat: "NUnit"
      #     testResultsFiles: "Converted-OWASP-ZAP-Report.xml"
      #     searchFolder: "$(Build.ArtifactStagingDirectory)"
      #   displayName: "Publish OWASP ZAP API Test Report"

      # - task: PublishBuildArtifacts@1
      #   inputs:
      #     PathtoPublish: "$(Build.ArtifactStagingDirectory)/OWASP-Zap-Report.html"
      #     ArtifactName: "Owasp Zap HTML Report"
      #     publishLocation: "Container"
      #   displayName: "Publish OWASP ZAP API HTML Report"

      # - task: CmdLine@2
      #   inputs:
      #     script: "chmod 755 -R $(Build.ArtifactStagingDirectory)"
      #   displayName: "Revert chmod permissions for ArtifactStagingDirectory"