pm/website-secure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request 'owasp zap config v2' (#9) from teste-bloqueio into main
DevSecOps Enterprise Pipeline / security-gate-and-deploy (push) Failing after 42s
Details

Browse Source 
Reviewed-on: #9
This commit was merged in pull request #9.
This commit is contained in:
pm
2026-06-12 23:42:12 +00:00
parent dd94920955 47db928d3c
commit a1aadf130d
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/deploy.yml
+3 -3
View File
@@ -64,15 +64,15 @@ jobs:
echo ">>> Provisioning ephemeral sandbox environment..." echo ">>> Provisioning ephemeral sandbox environment..."
docker run -d --name apex-sandbox --network zap-net apex-solutions:latest docker run -d --name apex-sandbox --network zap-net apex-solutions:latest
sleep 10 # Aumentei para 10s para garantir que o Node arranca bem sleep 10
echo ">>> Initiating OWASP ZAP Baseline Scan..." echo ">>> Initiating OWASP ZAP Baseline Scan..."
mkdir -p qatests mkdir -p qatests
# O ZAP precisa de aceder ao contentor pela rede criada # O truque aqui é mapear a pasta atual (.) para /zap/wrk/
docker run --user root --name zap-scanner \ docker run --user root --name zap-scanner \
--network zap-net \ --network zap-net \
-v zap-reports:/zap/wrk/:rw \ -v ${{ github.workspace }}:/zap/wrk/:rw \
-t ghcr.io/zaproxy/zaproxy:stable zap-baseline.py \ -t ghcr.io/zaproxy/zaproxy:stable zap-baseline.py \
-t http://apex-sandbox:3000 \ -t http://apex-sandbox:3000 \
-r report.html \ -r report.html \