owasp zap config v6 #12

Merged
pm merged 1 commits from teste-bloqueio into main 2026-06-12 23:57:31 +00:00
+12 -1
View File
@@ -48,12 +48,20 @@ jobs:
- name: 5. Dynamic Security Scan (OWASP ZAP) - name: 5. Dynamic Security Scan (OWASP ZAP)
if: github.event_name == 'push' if: github.event_name == 'push'
run: | run: |
echo ">>> Limpando ambiente anterior (Contentores e Rede)..."
docker rm -f apex-sandbox zap-scanner || true
docker network rm zap-net || true docker network rm zap-net || true
echo ">>> Criando rede isolada..."
docker network create zap-net docker network create zap-net
docker rm -f apex-sandbox || true
echo ">>> Iniciando sandbox..."
docker run -d --name apex-sandbox --network zap-net apex-solutions:latest docker run -d --name apex-sandbox --network zap-net apex-solutions:latest
sleep 10 sleep 10
echo ">>> Iniciando OWASP ZAP Baseline Scan..."
mkdir -p qatests mkdir -p qatests
docker run --user root --name zap-scanner \ docker run --user root --name zap-scanner \
--network zap-net \ --network zap-net \
-v ${{ github.workspace }}:/zap/wrk/:rw \ -v ${{ github.workspace }}:/zap/wrk/:rw \
@@ -61,7 +69,10 @@ jobs:
-t http://apex-sandbox:3000 \ -t http://apex-sandbox:3000 \
-r report.html \ -r report.html \
-I -c zap-baseline.conf -I -c zap-baseline.conf
docker cp zap-scanner:/zap/wrk/report.html qatests/report.html || true docker cp zap-scanner:/zap/wrk/report.html qatests/report.html || true
echo ">>> Limpeza final..."
docker rm -f zap-scanner apex-sandbox || true docker rm -f zap-scanner apex-sandbox || true
docker network rm zap-net || true docker network rm zap-net || true