owasp - Github Actions OWASP ZAP full vs API scan

Question

Is the api scan included in the full scan for the OWASP ZAP Action Full Scan for Github Actions? I need to know if I need to include a separate scan for APIs, or if its already covered by the full scan.

Answer 1

API 扫描允许您导入指定的 API 定义。完整扫描没有该选项。如果 ZAP 发现一个 API 定义作为蜘蛛的一部分，那么它将导入它。