I am setting up OWASP ZAP to perform automated vulnerability scans on web applications but need guidance on:
- How to configure ZAP for headless scanning via CLI.
- Automating scans in a CI/CD pipeline.
- Generating structured reports (e.g., JSON, XML) for further analysis.
If anyone has experience with scripting ZAP scans using Python or integrating it with Jenkins/GitHub Actions, I’d appreciate the insights.