mirror of
https://github.com/GSA/notifications-admin.git
synced 2026-08-24 00:07:02 -04:00
Merge pull request #829 from GSA/update-zap-scans
Update OWASP ZAP scans
This commit is contained in:
10
.github/workflows/checks.yml
vendored
10
.github/workflows/checks.yml
vendored
@@ -112,14 +112,14 @@ jobs:
|
|||||||
env:
|
env:
|
||||||
NOTIFY_ENVIRONMENT: scanning
|
NOTIFY_ENVIRONMENT: scanning
|
||||||
- name: Run OWASP Baseline Scan
|
- name: Run OWASP Baseline Scan
|
||||||
uses: zaproxy/action-baseline@v0.7.0
|
uses: zaproxy/action-baseline@v0.9.0
|
||||||
with:
|
with:
|
||||||
docker_name: "owasp/zap2docker-stable"
|
docker_name: 'ghcr.io/zaproxy/zaproxy:weekly'
|
||||||
target: "http://localhost:6012"
|
target: 'http://localhost:6012'
|
||||||
fail_action: true
|
fail_action: true
|
||||||
allow_issue_writing: false
|
allow_issue_writing: false
|
||||||
rules_file_name: "zap.conf"
|
rules_file_name: 'zap.conf'
|
||||||
cmd_options: "-I"
|
cmd_options: '-I'
|
||||||
|
|
||||||
a11y-scan:
|
a11y-scan:
|
||||||
runs-on: ubuntu-20.04
|
runs-on: ubuntu-20.04
|
||||||
|
|||||||
4
.github/workflows/daily_checks.yml
vendored
4
.github/workflows/daily_checks.yml
vendored
@@ -50,9 +50,9 @@ jobs:
|
|||||||
env:
|
env:
|
||||||
NOTIFY_ENVIRONMENT: scanning
|
NOTIFY_ENVIRONMENT: scanning
|
||||||
- name: Run OWASP Full Scan
|
- name: Run OWASP Full Scan
|
||||||
uses: zaproxy/action-full-scan@v0.4.0
|
uses: zaproxy/action-full-scan@v0.7.0
|
||||||
with:
|
with:
|
||||||
docker_name: 'owasp/zap2docker-stable'
|
docker_name: 'ghcr.io/zaproxy/zaproxy:weekly'
|
||||||
target: 'http://localhost:6012'
|
target: 'http://localhost:6012'
|
||||||
fail_action: true
|
fail_action: true
|
||||||
allow_issue_writing: false
|
allow_issue_writing: false
|
||||||
|
|||||||
Reference in New Issue
Block a user