darkhelm/notifications-api
1
0
Fork 0
mirror of https://github.com/GSA/notifications-api.git synced 2025-12-20 23:41:17 -05:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #517 from GSA/update-zap-scans

Browse Source 
Update OWASP ZAP scans
This commit is contained in:
Steven Reilly
2023-09-29 14:25:29 -04:00
committed by GitHub
parent d5d432dfd1 e019e9cf11
commit f81f048b5b
2 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.github/workflows/checks.yml vendored
View File

@@ -131,7 +131,7 @@ jobs:
run: make run-flask & run: make run-flask &
env: env:
SQLALCHEMY_DATABASE_TEST_URI: postgresql://user:password@localhost:5432/test_notification_api SQLALCHEMY_DATABASE_TEST_URI: postgresql://user:password@localhost:5432/test_notification_api
- name: Run OWASP Baseline Scan - name: Run OWASP API Scan
uses: zaproxy/action-api-scan@v0.5.0 uses: zaproxy/action-api-scan@v0.5.0
with: with:
docker_name: 'ghcr.io/zaproxy/zaproxy:weekly' docker_name: 'ghcr.io/zaproxy/zaproxy:weekly'

10
.github/workflows/daily_checks.yml vendored
View File

@@ -75,14 +75,18 @@ jobs:
run: make bootstrap run: make bootstrap
env: env:
SQLALCHEMY_DATABASE_TEST_URI: postgresql://user:password@localhost:5432/test_notification_api SQLALCHEMY_DATABASE_TEST_URI: postgresql://user:password@localhost:5432/test_notification_api
NOTIFY_E2E_TEST_EMAIL: ${{ secrets.NOTIFY_E2E_TEST_EMAIL }}
NOTIFY_E2E_TEST_HTTP_AUTH_PASSWORD: ${{ secrets.NOTIFY_E2E_TEST_HTTP_AUTH_PASSWORD }}
NOTIFY_E2E_TEST_HTTP_AUTH_USER: ${{ secrets.NOTIFY_E2E_TEST_HTTP_AUTH_USER }}
NOTIFY_E2E_TEST_PASSWORD: ${{ secrets.NOTIFY_E2E_TEST_PASSWORD }}
- name: Run server - name: Run server
run: make run-flask & run: make run-flask &
env: env:
SQLALCHEMY_DATABASE_TEST_URI: postgresql://user:password@localhost:5432/test_notification_api SQLALCHEMY_DATABASE_TEST_URI: postgresql://user:password@localhost:5432/test_notification_api
- name: Run OWASP Baseline Scan - name: Run OWASP API Scan
uses: zaproxy/action-api-scan@v0.4.0 uses: zaproxy/action-api-scan@v0.5.0
with: with:
docker_name: 'owasp/zap2docker-weekly' docker_name: 'ghcr.io/zaproxy/zaproxy:weekly'
target: 'http://localhost:6011/docs/openapi.yml' target: 'http://localhost:6011/docs/openapi.yml'
fail_action: true fail_action: true
allow_issue_writing: false allow_issue_writing: false