Provide ZAP Docker image for windows/amd64

[Raulster24]

Is your feature request related to a problem? Please describe.

No docker images for Windows engine, all distros images are linux

Describe the solution you'd like

Create a docker image to be able to run on windowsWindows

Describe alternatives you've considered

Need to run in azure devops pipeline and I have only option to run and its failing, on docker desktop I can easily change the windows to linux engine and do that. Look for any alternative solution but there is none

Screenshots

No response

Additional context

No response

Would you like to help fix this issue?

• Yes

[psiinon]

This is not currently on our roadmap, and so would be a good candidate for a sponsored development

[kingthorin]

You should be able to leverage WSL.

https://stackoverflow.com/a/64759746/7718222

It is now possible to run Linux docker images on Windows 10 natively using Windows Subsystem for Linux 2 (WSL2).

Steps:

Install WSL2.
Install Docker for Windows.
Go to Docker Settings -> General and check mark "Use the WSL 2 based engine".

Source: https://learn.microsoft.com/en-us/windows/wsl/tutorials/wsl-containers

Edit: Sorry I missed the "...on docker desktop I can easily change the windows to linux engine and do that" bit.

[Raulster24]

@kingthorin can you please tell me more on this as in how to leverage WSL? Any reference

[Raulster24]

@psiinon may be a very simple question, but can we run API scan through command line by installing ZAP proxy on my agent machine? Please suggest

[kingthorin]

@kingthorin can you please tell me more on this as in how to leverage WSL? Any reference

Just click the little triangle beside the text and it'll expand a section with the details...

[psiinon]

@psiinon may be a very simple question, but can we run API scan through command line by installing ZAP proxy on my agent machine? Please suggest

The API scan is limited to docker.
However you can do the same thing using the automation framework: https://www.zaproxy.org/docs/automate/automation-framework/ which can be run from the commandline and is much more flexible.

[Raulster24]

@psiinon Thanks, I downloaded the sh file to use it for the command line but I am getting this error when I execute it

[psiinon]

Thats a Linux shell script, and you appear to be trying to run it in Windows, rather than in WSL...

[Raulster24]

@psiinon yes correct my bad, i used the WSL command now available in windows to switch to one of the linux distro, Thanks much.

[Raulster24]

@psiinon I looked into the link that you provided. I see that for openapi we have only importurl option, even after I import how can I see the list of URLs imported plus I also want to run the scan similar to API scan using docker image. Can you please direct me to the reference?

[psiinon]

You are looking at the API docs.
I linked to the AF docs before: https://www.zaproxy.org/docs/automate/automation-framework/
They include an openapi job: https://www.zaproxy.org/docs/desktop/addons/openapi-support/automation/

Can you ask these sort of questions on the user group: https://groups.google.com/group/zaproxy-users
They do not appear to be directly relevant to the issue, ie providing a ZAP docker image for windows/amd64