diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml index 44a512c..c37c29d 100644 --- a/.gitea/workflows/deploy.yml +++ b/.gitea/workflows/deploy.yml @@ -48,12 +48,20 @@ jobs: - name: 5. Dynamic Security Scan (OWASP ZAP) if: github.event_name == 'push' run: | + echo ">>> Limpando ambiente anterior (Contentores e Rede)..." + docker rm -f apex-sandbox zap-scanner || true docker network rm zap-net || true + + echo ">>> Criando rede isolada..." docker network create zap-net - docker rm -f apex-sandbox || true + + echo ">>> Iniciando sandbox..." docker run -d --name apex-sandbox --network zap-net apex-solutions:latest sleep 10 + + echo ">>> Iniciando OWASP ZAP Baseline Scan..." mkdir -p qatests + docker run --user root --name zap-scanner \ --network zap-net \ -v ${{ github.workspace }}:/zap/wrk/:rw \ @@ -61,7 +69,10 @@ jobs: -t http://apex-sandbox:3000 \ -r report.html \ -I -c zap-baseline.conf + docker cp zap-scanner:/zap/wrk/report.html qatests/report.html || true + + echo ">>> Limpeza final..." docker rm -f zap-scanner apex-sandbox || true docker network rm zap-net || true