activescan

context:

String: Name of the context to attack

String, default: first context

user:

String: An optional user to use for authentication, must be defined in the environment

String

policy:

String: Name of the scan policy to be used

String, default: Default Policy

maxRuleDurationInMins:

Int: The max time in minutes any individual rule will be allowed to run for

Int, default: 0 unlimited

maxScanDurationInMins:

Int: The max time in minutes the active scanner will be allowed to run for

Int, default: 0 unlimited

addQueryParam:

Bool: If set will add an extra query parameter to requests that do not have one

Bool, default: false

defaultPolicy:

String: The name of the default scan policy to use.

String, default: Default Policy

delayInMs:

Int: The delay in milliseconds between each request, used to reduce the strain on the target

Int, default 0

handleAntiCSRFTokens:

Bool: If set, automatically handles anti-CSRF tokens

Bool, default: false

injectPluginIdInHeader:

If set, the relevant rule Id will be injected into the X-ZAP-Scan-ID header of each request,

Bool

scanHeadersAllRequests:

Bool: If set then the headers of requests that do not include any parameters will be scanned,

Bool, default: false

threadPerHost:

Int: The max number of threads per host

Int, default: 2

policyDefinition:

The policy definition - is only used if the 'policy' is not set

defaultStrength:

The default Attack Strength for all rules is either Low, Medium, High, or Insane (not recommended).

String

defaultThreshold:

String: The default Alert Threshold for all rules, is either Off, Low, Medium, or High.

String, default: Medium

rules:

A list of one or more active scan rules and associated settings which override the defaults.

id:

Int: The rule id as per https://www.zaproxy.org/docs/alerts/

name:

String: The name of the rule for documentation purposes - this is not required nor actually used.

String

strength:

The Attack Strength for this rule is either Low, Medium, High, or Insane.

String, default: Medium

threshold:

The Alert Threshold for this rule, is either Off, Low, Medium, or High.

String, default: Medium