darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-09-08 08:28:15 -04:00
Code Issues Packages Projects Releases Wiki Activity

Update OWASP ZAP scans

Browse Source 
The OWASP ZAP scan GitHub Actions have been updated recently and we need to make sure our GitHub Actions account for the recent changes.  This changeset makes sure we are using the latest version of the OWASP ZAP API scan and the correct Docker image.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This commit is contained in:
Carlo Costino
2023-09-28 17:31:39 -04:00
parent 5557f313b3
commit 38379176f4
2 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
.github/workflows/checks.yml vendored
View File

@@ -112,14 +112,14 @@ jobs:
env: env:
NOTIFY_ENVIRONMENT: scanning NOTIFY_ENVIRONMENT: scanning
- name: Run OWASP Baseline Scan - name: Run OWASP Baseline Scan
uses: zaproxy/action-baseline@v0.7.0 uses: zaproxy/action-baseline@v0.9.0
with: with:
docker_name: "owasp/zap2docker-stable" docker_name: 'ghcr.io/zaproxy/zaproxy:weekly'
target: "http://localhost:6012" target: 'http://localhost:6012'
fail_action: true fail_action: true
allow_issue_writing: false allow_issue_writing: false
rules_file_name: "zap.conf" rules_file_name: 'zap.conf'
cmd_options: "-I" cmd_options: '-I'
a11y-scan: a11y-scan:
runs-on: ubuntu-20.04 runs-on: ubuntu-20.04

4
.github/workflows/daily_checks.yml vendored
View File

@@ -50,9 +50,9 @@ jobs:
env: env:
NOTIFY_ENVIRONMENT: scanning NOTIFY_ENVIRONMENT: scanning
- name: Run OWASP Full Scan - name: Run OWASP Full Scan
uses: zaproxy/action-full-scan@v0.4.0 uses: zaproxy/action-full-scan@v0.7.0
with: with:
docker_name: 'owasp/zap2docker-stable' docker_name: 'ghcr.io/zaproxy/zaproxy:weekly'
target: 'http://localhost:6012' target: 'http://localhost:6012'
fail_action: true fail_action: true
allow_issue_writing: false allow_issue_writing: false