owasp zap config v2

2026-06-13 00:40:00 +01:00
parent 745c8b4e71
commit 47db928d3c
1 changed files with 3 additions and 3 deletions
@@ -64,15 +64,15 @@ jobs:
          echo ">>> Provisioning ephemeral sandbox environment..."
          docker run -d --name apex-sandbox --network zap-net apex-solutions:latest
-          sleep 10 # Aumentei para 10s para garantir que o Node arranca bem
+          sleep 10
          echo ">>> Initiating OWASP ZAP Baseline Scan..."
          mkdir -p qatests
-          # O ZAP precisa de aceder ao contentor pela rede criada
+          # O truque aqui é mapear a pasta atual (.) para /zap/wrk/
          docker run --user root --name zap-scanner \
            --network zap-net \
-            -v zap-reports:/zap/wrk/:rw \
+            -v ${{ github.workspace }}:/zap/wrk/:rw \
            -t ghcr.io/zaproxy/zaproxy:stable zap-baseline.py \
            -t http://apex-sandbox:3000 \
            -r report.html \