Skip to content

Initial commit

Initial commit #1

Workflow file for this run

name: OWASP ZAP scan
on:
push:
branches: [ main ]
paths-ignore:
- 'doc/**'
- 'README.md'
pull_request:
branches: [ main ]
jobs:
owasp-scan:
name: OWASP ZAP Scan
runs-on: ubuntu-latest
services:
postgres:
image: postgres
options: >-
--health-cmd pg_isready
--health-interval 10s
--health-timeout 5s
--health-retries 5
ports: ["5432:5432"]
env:
POSTGRES_DB: continuous_monitoring_test
POSTGRES_USER: cidbuser
POSTGRES_PASSWORD: postgres
steps:
- uses: actions/checkout@v4
- id: setup
uses: ./.github/actions/setup-project
- uses: ./.github/actions/run-server
with:
database_url: ${{ steps.setup.outputs.database_url }}
- name: Run OWASP Baseline Scan
uses: zaproxy/action-baseline@v0.12.0
with:
docker_name: 'ghcr.io/zaproxy/zaproxy:weekly'
target: 'http://localhost:3000/'
fail_action: true
allow_issue_writing: false
rules_file_name: 'zap.conf'
cmd_options: '-I'