Skip to content
ZAP

Update patch dependencies to v2.18.2 #4755

Sign in to view logs

Update patch dependencies to v2.18.2

Update patch dependencies to v2.18.2 #4755

Workflow file for this run

.github/workflows/dast.yml at ba3aaea
name: ZAP
on:
push:
branches:
- main
pull_request:
branches:
- main
workflow_dispatch:
jobs:
build:
runs-on: ubuntu-latest
name: ZAP API Scan
steps:
- uses: actions/checkout@v4
- uses: actions/setup-java@v4
with:
java-version: 17
distribution: corretto
cache: gradle
- name: ShadowJar
run: ./gradlew clean shadowJar
- name: Run App in Container
run: docker compose up --build -d
- name: Check API Health
run: ./health-check.sh
- name: Run ZAP API Scan
run: docker run -v $(pwd):/zap/wrk/:rw --user root -t ghcr.io/zaproxy/zaproxy:weekly zap-api-scan.py -t http://$(ip -f inet -o addr show docker0 | awk '{print $4}' | cut -d '/' -f 1):8080/openapi -f openapi -r api-scan-report.html
- name: Upload Report
uses: actions/upload-artifact@v4
if: always()
with:
name: zap-scan-report
path: api-scan-report.html