Merge pull request 'owasp zap config v2' (#9) from teste-bloqueio into main

Reviewed-on: #9
2026-06-12 23:42:12 +00:00
parent dd94920955 47db928d3c
commit a1aadf130d
1 changed files with 3 additions and 3 deletions
@@ -64,15 +64,15 @@ jobs:
          
          echo ">>> Provisioning ephemeral sandbox environment..."
          docker run -d --name apex-sandbox --network zap-net apex-solutions:latest
-          sleep 10 # Aumentei para 10s para garantir que o Node arranca bem
+          sleep 10
          
          echo ">>> Initiating OWASP ZAP Baseline Scan..."
          mkdir -p qatests
          
-          # O ZAP precisa de aceder ao contentor pela rede criada
+          # O truque aqui é mapear a pasta atual (.) para /zap/wrk/
          docker run --user root --name zap-scanner \
            --network zap-net \
-            -v zap-reports:/zap/wrk/:rw \
+            -v ${{ github.workspace }}:/zap/wrk/:rw \
            -t ghcr.io/zaproxy/zaproxy:stable zap-baseline.py \
            -t http://apex-sandbox:3000 \
            -r report.html \