don't fail on warnings, ignore other low risk

wmo-im · Jun 24, 2024 · 2d47ee5 · 2d47ee5
1 parent 2b35836
commit 2d47ee5
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/.github/workflows/zaproxy.yml b/.github/workflows/zaproxy.yml
@@ -35,4 +35,6 @@ jobs:
       uses: zaproxy/[email protected]
       with:
         target: 'http://localhost'
-        rules_file_name: '.zap/rules.tsv'
+        rules_file_name: '.zap/rules.tsv'
+        cmd_options: '-I'
+        allow_issue_writing: 'false'
diff --git a/.zap/rules.tsv b/.zap/rules.tsv
@@ -17,3 +17,6 @@
 10049	IGNORE	Non-Storable Content	Informational
 10112	IGNORE	Session Management Response Identified	Informational
 10049	IGNORE	Storable and Cacheable Content	Informational
+10009	IGNORE	In Page Banner Information Leak	Low
+10036	IGNORE	"Server Leaks Version Information via ""Server"" HTTP Response Header Field"	Low
+10110	IGNORE	Dangerous JS Functions	Low