Sha256: 27400c2d2511fbef865a75927b98eddd4e319e25f28ea00a21b2d9ef0f55d992
Contents?: true
Size: 1.07 KB
Versions: 16
Compression:
Stored size: 1.07 KB
Contents
name: OWASP ZAP scan
on:
push:
branches: [ main ]
paths-ignore:
- 'doc/**'
- 'README.md'
pull_request:
branches: [ main ]
jobs:
owasp-scan:
name: OWASP ZAP Scan
runs-on: ubuntu-latest
services:
postgres:
image: postgres
options: >-
--health-cmd pg_isready
--health-interval 10s
--health-timeout 5s
--health-retries 5
ports: ["5432:5432"]
env:
POSTGRES_DB: <%= app_name %>_test
POSTGRES_USER: cidbuser
POSTGRES_PASSWORD: postgres
steps:
- uses: actions/checkout@v2
- id: setup
uses: ./.github/actions/setup-project
- uses: ./.github/actions/run-server
with:
database_url: ${{ steps.setup.outputs.database_url }}
- name: Run OWASP Baseline Scan
uses: zaproxy/action-baseline@v0.6.1
with:
docker_name: 'owasp/zap2docker-weekly'
target: 'http://localhost:3000/'
fail_action: true
rules_file_name: 'zap.conf'
cmd_options: '-I'
Version data entries
16 entries across 16 versions & 1 rubygems