mirror of
https://github.com/GSA/notifications-api.git
synced 2026-01-15 07:01:20 -05:00
Trying ZAP weekly release instead of stable
I noticed that a previous scan yesterday had referenced the weekly releases under the hood despite being configured for stable. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This commit is contained in:
2
.github/workflows/checks.yml
vendored
2
.github/workflows/checks.yml
vendored
@@ -134,7 +134,7 @@ jobs:
|
||||
- name: Run OWASP Baseline Scan
|
||||
uses: zaproxy/action-api-scan@v0.5.0
|
||||
with:
|
||||
docker_name: 'ghcr.io/zaproxy/zaproxy:stable'
|
||||
docker_name: 'ghcr.io/zaproxy/zaproxy:weekly'
|
||||
target: 'http://localhost:6011/docs/openapi.yml'
|
||||
fail_action: true
|
||||
allow_issue_writing: false
|
||||
|
||||
Reference in New Issue
Block a user