Security DAST – Centralized Dynamic Application Security Testing
A reusable centralized DAST project with OWASP ZAP, Nuclei, and OPA policy logic, offering consistent PASS/WARN/FAIL policies, audit-ready artifacts, PR summaries, and a reusable GitHub Actions workflow for dynamic security testing.
The problem
Dynamic application security testing often gets rebuilt independently in every repository. Scanner configuration drifts, policy decisions become inconsistent, and evidence is difficult to compare across applications.
The implementation
This project centralizes OWASP ZAP and Nuclei scanning behind a reusable GitHub Actions workflow. OPA policy evaluates findings into consistent PASS, WARN, and FAIL outcomes, while PR summaries and retained artifacts make the result visible to engineers and useful for later review.
Operational value
- one maintained workflow instead of scanner logic copied between repositories
- consistent policy decisions across participating applications
- audit-ready artifacts retained with the pipeline run
- a public implementation that teams can inspect and adapt
Next step
Inspect the implementation.
Public project with centralized DAST workflow and policy stack. Includes reusable GitHub Actions, scanner configs, OPA policies, and automation helpers for consistent vulnerability assessment across repos.
View public project →