Vulnerability scanning is a critical step in software development security and helps identify security weaknesses within your web app. In this hands-on lab, you’ll use the Web Security Scanner to identify security vulnerabilities within a running web app.
Learning Objectives
Successfully complete this lab by achieving the following learning objectives:
- Reserve External Static IP Address
- From the GCP console, navigate to the IP Addresses page.
- Reserve a static IP address for the newly created VM instance.
- Create and Run a Web Security Scanner Scan
- Enable the Web Security Scanner service using the GCP console.
- Create a Web Security Scanner scan.
- Run the newly created Web Security Scanner scan.
- Enable Container Registry
Enable the Container Registry service using the GCP console.
- Docker Pull, Tag, and Push Image
Using the Cloud Shell, perform the following commands:
- Pull the DVWA Docker image.
- Tag the DVWA Docker image.
- Push the DVWA Docker image.
- Create a VM Instance Using the Container
Create a new Compute Engine VM instance, using the newly pushed image, in the GCP console.
