Compare commits
2 Commits
0a92b7f4a0
...
87a6c63ac8
| Author | SHA1 | Date | |
|---|---|---|---|
| 87a6c63ac8 | |||
| 0fdd3c1558 |
@@ -48,12 +48,20 @@ jobs:
|
|||||||
- name: 5. Dynamic Security Scan (OWASP ZAP)
|
- name: 5. Dynamic Security Scan (OWASP ZAP)
|
||||||
if: github.event_name == 'push'
|
if: github.event_name == 'push'
|
||||||
run: |
|
run: |
|
||||||
|
echo ">>> Limpando ambiente anterior (Contentores e Rede)..."
|
||||||
|
docker rm -f apex-sandbox zap-scanner || true
|
||||||
docker network rm zap-net || true
|
docker network rm zap-net || true
|
||||||
|
|
||||||
|
echo ">>> Criando rede isolada..."
|
||||||
docker network create zap-net
|
docker network create zap-net
|
||||||
docker rm -f apex-sandbox || true
|
|
||||||
|
echo ">>> Iniciando sandbox..."
|
||||||
docker run -d --name apex-sandbox --network zap-net apex-solutions:latest
|
docker run -d --name apex-sandbox --network zap-net apex-solutions:latest
|
||||||
sleep 10
|
sleep 10
|
||||||
|
|
||||||
|
echo ">>> Iniciando OWASP ZAP Baseline Scan..."
|
||||||
mkdir -p qatests
|
mkdir -p qatests
|
||||||
|
|
||||||
docker run --user root --name zap-scanner \
|
docker run --user root --name zap-scanner \
|
||||||
--network zap-net \
|
--network zap-net \
|
||||||
-v ${{ github.workspace }}:/zap/wrk/:rw \
|
-v ${{ github.workspace }}:/zap/wrk/:rw \
|
||||||
@@ -61,7 +69,10 @@ jobs:
|
|||||||
-t http://apex-sandbox:3000 \
|
-t http://apex-sandbox:3000 \
|
||||||
-r report.html \
|
-r report.html \
|
||||||
-I -c zap-baseline.conf
|
-I -c zap-baseline.conf
|
||||||
|
|
||||||
docker cp zap-scanner:/zap/wrk/report.html qatests/report.html || true
|
docker cp zap-scanner:/zap/wrk/report.html qatests/report.html || true
|
||||||
|
|
||||||
|
echo ">>> Limpeza final..."
|
||||||
docker rm -f zap-scanner apex-sandbox || true
|
docker rm -f zap-scanner apex-sandbox || true
|
||||||
docker network rm zap-net || true
|
docker network rm zap-net || true
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user