Dockerfile-zap-cli

FROM owasp/zap2docker-stable
MAINTAINER grunny

RUN pip install --upgrade git+https://github.com/Grunny/zap-cli.git

RUN chown -R zap /zap/
ENV ZAP_PORT 8080

Example

# The above Dockerfile can be built with: docker build -t "zap-cli" .
# Example of running a self-contained (-sc) quick scan with only XSS scanners, that starts ZAP with the API key disabled
$ docker run -u zap -i zap-cli zap-cli quick-scan -sc -o '-config api.disablekey=true' -s xss "http://127.0.0.1/index.php?foo=bar"
[INFO]            Starting ZAP daemon
[INFO]            Running a quick scan for http://127.0.0.1/index.php?foo=bar
[INFO]            Issues found: 1
+----------------------------------+--------+----------+--------------------------------------------------------------------------------+
| Alert                            | Risk   |   CWE ID | URL                                                                            |
+==================================+========+==========+================================================================================+
| Cross Site Scripting (Reflected) | High   |       79 | http://127.0.0.1/index.php?foo=%22%3E%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E |
+----------------------------------+--------+----------+--------------------------------------------------------------------------------+
[INFO]            Shutting down ZAP daemon

Ah! Adding a USER root before the pip RUN fixed it.