OWASP OWASP#714 : Fixing workflow triggering isues

puneeth072003 · Oct 31, 2023 · d68db2d · d68db2d
1 parent 3eb84e5
commit d68db2d
Showing 1 changed file with 1 addition and 14 deletions.
diff --git a/.github/workflows/dast-zap-test.yml b/.github/workflows/dast-zap-test.yml
@@ -18,20 +18,7 @@ jobs:
       - name: Trigger Building JAR cache
         if: steps.cache.outputs.cache-hit != 'true'
         run: |
-          const { Octokit } = require("@octokit/core");
-          const octokit = new Octokit({ auth: process.env.GITHUB_TOKEN });
-          const { data: workflows } = await octokit.request("GET /repos/commjoen/wrongsecrets/actions/workflows", {
-            owner: process.env.GITHUB_REPOSITORY.split("/")[0],
-            repo: process.env.GITHUB_REPOSITORY.split("/")[1]
-          });
-          const secondWorkflow = workflows.workflows.find(w => w.name === "building-jar-cache.yml");
-          if (secondWorkflow) {
-            await octokit.request("POST /repos/commjoen/wrongsecrets/actions/workflows/Building JAR cache/dispatches", {
-              owner: process.env.GITHUB_REPOSITORY.split("/")[0],
-              repo: process.env.GITHUB_REPOSITORY.split("/")[1],
-              workflow_id: secondWorkflow.id
-            });
-          }
+          gh workflow run "Building JAR cache" --ref "main"
       - name: Start wrongsecrets
         run: nohup ./mvnw spring-boot:run -Dspring-boot.run.profiles=without-vault &
       - name: ZAP Scan