Provides a docker image of the arachni security tool with an additional reporter for generating xunit reports. These can be parsed into test results for failing builds using JUnit parser in Bamboo and Jenkins.
docker build -t jenkins-slave-arachni .
oc process -f .openshift/templates/jenkins-slave-generic-template.yml \
-p NAME=jenkins-slave-arachni \
-p SOURCE_CONTEXT_DIR=jenkins-slaves/jenkins-slave-arachni \
| oc create -f -For all params see the list in the .openshift/templates/jenkins-slave-generic-template.yml or run oc process --parameters -f .openshift/templates/jenkins-slave-generic-template.yml.
For local running and experimentation run docker run -i -t --rm jenkins-slave-arachni /bin/bash and have a play once inside the container. /arachni is where the product is and /arachni/bin/arachni for the binary
Creates a HTML web report and report.xml once website has been scanned which can be consumed by Jenkins. Add a new Kubernetes Container template called jenkins-slave-arachni and specify this as the node when running builds
/arachni/bin/arachni ${URL_TO_TEST} --report-save-path=arachni-report.afr
/arachni/bin/arachni_reporter arachni-report.afr --reporter=xunit:outfile=report.xml --reporter=html:outfile=web-report.zip
unzip web-report.zip -d arachni-web-report