behave-zap 0.2.0

Reusable Behave hooks for Selenium + OWASP ZAP integration.

behave-zap

behave-zap is a working Python library that integrates Behave and OWASP ZAP into a single, reusable web testing + DAST execution model.

It is designed for teams that want:

• Functional browser automation and security scanning in the same run
• Per-feature control of active scan targets
• A final consolidated ZAP report with all discovered alerts
• A CI-friendly flow with reference pipeline examples

Why this library

Security scanning is often bolted on after functional testing. behave-zap makes DAST a first-class part of your Behave lifecycle:

• Hook-based orchestration for before_all, after_feature, and after_all
• Chrome-focused web automation primitives for page objects and driver setup
• Feature-level attack-surface segmentation through target mapping
• Final report generation after full test execution

Core architecture

• behave_zap/hooks.py
  • Behave lifecycle integration
  • ZAP initialization, passive/active scan orchestration, final reports
• behave_zap/web.py
  • Chrome WebDriver creation
  • Context + page-object base classes (PageObject, Button, InputText, etc.)

Installation

Install as editable package in this repository:

pip install -e .

Install from a consumer project:

pip install behave-zap

Quick start

Note: For a full, hands-on CI example (including GitHub Actions, ZAP annotations and behave-zap usage), see the learning repository: https://github.com/testingsoul/behave-zap_learning

• Test execution guide: docs/test.md
• Full library experience: docs/library-experience.md