I've been poking around the web looking for a web app security scanner I could introduce into by build/QA process to pick up some of the common issues in my applications. The tricky part is that I need it to output some sort of parseable report that maybe could be checked with a Jenkins plugin of some sort.
I know it won't catch all of the issues - that's not what I'm after. I do want something that I can use to catch some of the more obvious ones. Most of the scanners I've seen do a good job of representing this stuff in their GUI, but I need something:
- preferably linux based (and CLI)
- outputs XML or JSON formatted results
I've seen another question or two on here about this, but they're pretty old (1yr or so) so I figured there'd be advancements since then. Anyone know of any? Thanks in advance.