openauditB85out of 100: openaudit's audit of itself
web.zap-baseline

OWASP ZAP baseline

Runs the OWASP ZAP baseline scan (zap-baseline.py: spider for about a minute, then passive rules only; no attacks and no active scan) from a local install or the pinned Docker image. Sends GET requests while spidering, more than the default URL auditors, so it is opt-in. Localhost targets are reached through host.docker.internal. Authenticated scans are not supported.

Engine
Wrapped scanner
Wraps
docker
Targets
URL, Web app
Areas
Security
Runs
Opt-in: only when selected with --only
Network
Only the target itself

Run only this auditor

bunx openaudit https://example.com --only web.zap-baseline

Wraps docker. When it isn't installed, the auditor is skipped with an install hint and the rest of the audit runs.