-
Notifications
You must be signed in to change notification settings - Fork 844
46 lines (40 loc) · 1.17 KB
/
platfotm-owasp.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
# v1.2
name: Platform OWASP ZAP
on:
push:
paths-ignore:
- '.github/**'
- 'docs/**'
- 'build/**'
- 'README.md'
- 'LICENSE'
- '**/argoDeploy.json'
branches: [ dev ]
workflow_dispatch:
jobs:
owasp:
runs-on: ubuntu-latest
steps:
- name: Install VirtoCommerce.GlobalTool
uses: VirtoCommerce/vc-github-actions/setup-vcbuild@master
- name: Docker Login
uses: azure/docker-login@v1
with:
login-server: ghcr.io
username: $GITHUB_ACTOR
password: ${{ secrets.GITHUB_TOKEN }}
- name: Docker Env
uses: VirtoCommerce/vc-github-actions/docker-env@master
with:
githubUser: ${{ env.GITHUB_ACTOR }}
githubToken: ${{ env.GITHUB_TOKEN }}
platformImage: ghcr.io/virtocommerce/platform
storefrontImage: ghcr.io/virtocommerce/storefront
validateSwagger: 'false'
- name: OWASP ZAP Full Scan
uses: zaproxy/[email protected]
with:
token: ${{ secrets.GITHUB_TOKEN }}
docker_name: 'owasp/zap2docker-stable'
target: 'http://localhost:8090'
cmd_options: '-a -d'