Whether an IoT device uses a web application or web service for messaging, its code should be statically and dynamically analyzed for software security bugs. In this recipe, we will demonstrate how to configure dynamic scanning of web application builds prior to production deployments.
Configuring continuous integration testing for web applications
Getting ready
In this recipe, we will use Jenkins as our automation build server and OWASP ZAP as our dynamic scanner. We will use the OWASP ZAP Jenkins plugin and the OWASP ZAP tool that can be downloaded via the following link: