darkhelm/notifications-api
1
0
Fork 0
mirror of https://github.com/GSA/notifications-api.git synced 2025-12-11 15:52:21 -05:00
Code Issues Packages Projects Releases Wiki Activity

Update OWASP ZAP scans

Browse Source 
The OWASP ZAP scan GitHub Actions have been updated recently and we need to make sure our GitHub Actions account for the recent changes.  This changeset makes sure we are using the latest version of the OWASP ZAP API scan, the correct Docker image, and adjusts the name of the step to accurately reflect what scan is being run.

Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
This commit is contained in:
Carlo Costino
2023-09-28 17:28:27 -04:00
parent 6ac331eeef
commit e019e9cf11
2 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.github/workflows/checks.yml vendored
View File

@@ -131,7 +131,7 @@ jobs:
run: make run-flask & run: make run-flask &
env: env:
SQLALCHEMY_DATABASE_TEST_URI: postgresql://user:password@localhost:5432/test_notification_api SQLALCHEMY_DATABASE_TEST_URI: postgresql://user:password@localhost:5432/test_notification_api
- name: Run OWASP Baseline Scan - name: Run OWASP API Scan
uses: zaproxy/action-api-scan@v0.5.0 uses: zaproxy/action-api-scan@v0.5.0
with: with:
docker_name: 'ghcr.io/zaproxy/zaproxy:weekly' docker_name: 'ghcr.io/zaproxy/zaproxy:weekly'

10
.github/workflows/daily_checks.yml vendored
View File

@@ -75,14 +75,18 @@ jobs:
run: make bootstrap run: make bootstrap
env: env:
SQLALCHEMY_DATABASE_TEST_URI: postgresql://user:password@localhost:5432/test_notification_api SQLALCHEMY_DATABASE_TEST_URI: postgresql://user:password@localhost:5432/test_notification_api
NOTIFY_E2E_TEST_EMAIL: ${{ secrets.NOTIFY_E2E_TEST_EMAIL }}
NOTIFY_E2E_TEST_HTTP_AUTH_PASSWORD: ${{ secrets.NOTIFY_E2E_TEST_HTTP_AUTH_PASSWORD }}
NOTIFY_E2E_TEST_HTTP_AUTH_USER: ${{ secrets.NOTIFY_E2E_TEST_HTTP_AUTH_USER }}
NOTIFY_E2E_TEST_PASSWORD: ${{ secrets.NOTIFY_E2E_TEST_PASSWORD }}
- name: Run server - name: Run server
run: make run-flask & run: make run-flask &
env: env:
SQLALCHEMY_DATABASE_TEST_URI: postgresql://user:password@localhost:5432/test_notification_api SQLALCHEMY_DATABASE_TEST_URI: postgresql://user:password@localhost:5432/test_notification_api
- name: Run OWASP Baseline Scan - name: Run OWASP API Scan
uses: zaproxy/action-api-scan@v0.4.0 uses: zaproxy/action-api-scan@v0.5.0
with: with:
docker_name: 'owasp/zap2docker-weekly' docker_name: 'ghcr.io/zaproxy/zaproxy:weekly'
target: 'http://localhost:6011/docs/openapi.yml' target: 'http://localhost:6011/docs/openapi.yml'
fail_action: true fail_action: true
allow_issue_writing: false allow_issue_writing: false