ZAP baseline Scan on wis2box-webapp

wmo-im · Jun 26, 2024 · 3d97f16 · 3d97f16
1 parent d111f1a
commit 3d97f16
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/.github/workflows/zaproxy.yml b/.github/workflows/zaproxy.yml
@@ -31,9 +31,17 @@ jobs:
         python3 wis2box-ctl.py execute wis2box metadata station add-topic --territory-name $TERRITORY  $CHANNEL
         python3 wis2box-ctl.py execute wis2box data ingest -mdi $DISCOVERY_METADATA_ID -p $TEST_DATA
         sleep 10
-    - name: ZAP baseline Scan
+    - name: ZAP baseline Scan on UI 🕵️‍♂️
       uses: zaproxy/[email protected]
       with:
         target: 'http://localhost'
         rules_file_name: '.zap/rules.tsv'
+        allow_issue_writing: 'false'
+    - name: ZAP baseline Scan on wis2box-webapp 🕵️‍♂️
+      uses: zaproxy/[email protected]
+      env:
+        ZAP_AUTH_HEADER_VALUE: "Basic d2lzMmJveC11c2VyOndpczJib3h0ZXN0MTIzCg==" # wis2box-user:wis2boxtest123, testing only
+      with:
+        target: 'http://localhost/wis2box-webapp'
+        rules_file_name: '.zap/rules.tsv'
         allow_issue_writing: 'false'