I want to scan my app which is in GCP using cloud web security scanner and we are using more than two fields for login page , like client id , username and password but as per google document we have to pass two input username and password , so there anyway we can scan it without failed scan.

note :- we are not using IAP authentication

CodePudding user response：

I would like to suggest you to raise a Feature Request to make the Web Security Scanner more adaptative to your needs.

Besides, you could gather the additional fields from the URL itself (from the GET request) to automatically populate the missing field.