From ccdace0951b644252708413757695d771f164d0e Mon Sep 17 00:00:00 2001 From: pm Date: Sat, 13 Jun 2026 01:00:19 +0100 Subject: [PATCH] owasp zap config v7 --- .gitea/workflows/deploy.yml | 10 ++-------- 1 file changed, 2 insertions(+), 8 deletions(-) diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml index c37c29d..2062be5 100644 --- a/.gitea/workflows/deploy.yml +++ b/.gitea/workflows/deploy.yml @@ -48,31 +48,25 @@ jobs: - name: 5. Dynamic Security Scan (OWASP ZAP) if: github.event_name == 'push' run: | - echo ">>> Limpando ambiente anterior (Contentores e Rede)..." docker rm -f apex-sandbox zap-scanner || true docker network rm zap-net || true - - echo ">>> Criando rede isolada..." docker network create zap-net - echo ">>> Iniciando sandbox..." docker run -d --name apex-sandbox --network zap-net apex-solutions:latest sleep 10 - echo ">>> Iniciando OWASP ZAP Baseline Scan..." mkdir -p qatests + # Mapeamos o diretório atual do runner para /zap/wrk/ docker run --user root --name zap-scanner \ --network zap-net \ - -v ${{ github.workspace }}:/zap/wrk/:rw \ + -v "$(pwd):/zap/wrk/:rw" \ -t ghcr.io/zaproxy/zaproxy:stable zap-baseline.py \ -t http://apex-sandbox:3000 \ -r report.html \ -I -c zap-baseline.conf docker cp zap-scanner:/zap/wrk/report.html qatests/report.html || true - - echo ">>> Limpeza final..." docker rm -f zap-scanner apex-sandbox || true docker network rm zap-net || true