From 3d97f1639aa7c0abc2db430ffe977da024c9b50c Mon Sep 17 00:00:00 2001 From: Maaike Date: Wed, 26 Jun 2024 14:47:54 +0200 Subject: [PATCH] ZAP baseline Scan on wis2box-webapp --- .github/workflows/zaproxy.yml | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/.github/workflows/zaproxy.yml b/.github/workflows/zaproxy.yml index d29660eb9..b64dabc11 100644 --- a/.github/workflows/zaproxy.yml +++ b/.github/workflows/zaproxy.yml @@ -31,9 +31,17 @@ jobs: python3 wis2box-ctl.py execute wis2box metadata station add-topic --territory-name $TERRITORY $CHANNEL python3 wis2box-ctl.py execute wis2box data ingest -mdi $DISCOVERY_METADATA_ID -p $TEST_DATA sleep 10 - - name: ZAP baseline Scan + - name: ZAP baseline Scan on UI 🕵️‍♂️ uses: zaproxy/action-baseline@v0.12.0 with: target: 'http://localhost' rules_file_name: '.zap/rules.tsv' + allow_issue_writing: 'false' + - name: ZAP baseline Scan on wis2box-webapp 🕵️‍♂️ + uses: zaproxy/action-baseline@v0.12.0 + env: + ZAP_AUTH_HEADER_VALUE: "Basic d2lzMmJveC11c2VyOndpczJib3h0ZXN0MTIzCg==" # wis2box-user:wis2boxtest123, testing only + with: + target: 'http://localhost/wis2box-webapp' + rules_file_name: '.zap/rules.tsv' allow_issue_writing: 'false' \ No newline at end of file