Skip to content

Commit

Permalink
VCST-1107: Use latest zaproxy/action-baseline (#2799)
Browse files Browse the repository at this point in the history
fix: Used latest version of GH action zaproxy/action-baseline, removed docker_name option as by default the action runs the stable version of ZAP.
  • Loading branch information
AndrewEhlo authored May 31, 2024
1 parent ffba278 commit 8d3da3f
Showing 1 changed file with 3 additions and 4 deletions.
7 changes: 3 additions & 4 deletions .github/workflows/platfotm-owasp.yml
Original file line number Diff line number Diff line change
Expand Up @@ -22,9 +22,9 @@ jobs:
uses: VirtoCommerce/vc-github-actions/setup-vcbuild@master

- name: Docker Login
uses: azure/docker-login@v1
uses: docker/login-action@v3
with:
login-server: ghcr.io
registry: ghcr.io
username: $GITHUB_ACTOR
password: ${{ secrets.GITHUB_TOKEN }}

Expand All @@ -38,9 +38,8 @@ jobs:
validateSwagger: 'false'

- name: OWASP ZAP Full Scan
uses: zaproxy/action-baseline@v0.4.0
uses: zaproxy/action-baseline@v0.12.0
with:
token: ${{ secrets.GITHUB_TOKEN }}
docker_name: 'owasp/zap2docker-stable'
target: 'http://localhost:8090'
cmd_options: '-a -d'

0 comments on commit 8d3da3f

Please sign in to comment.