owasp zap config v6 #12
@@ -48,12 +48,20 @@ jobs:
|
||||
- name: 5. Dynamic Security Scan (OWASP ZAP)
|
||||
if: github.event_name == 'push'
|
||||
run: |
|
||||
echo ">>> Limpando ambiente anterior (Contentores e Rede)..."
|
||||
docker rm -f apex-sandbox zap-scanner || true
|
||||
docker network rm zap-net || true
|
||||
|
||||
echo ">>> Criando rede isolada..."
|
||||
docker network create zap-net
|
||||
docker rm -f apex-sandbox || true
|
||||
|
||||
echo ">>> Iniciando sandbox..."
|
||||
docker run -d --name apex-sandbox --network zap-net apex-solutions:latest
|
||||
sleep 10
|
||||
|
||||
echo ">>> Iniciando OWASP ZAP Baseline Scan..."
|
||||
mkdir -p qatests
|
||||
|
||||
docker run --user root --name zap-scanner \
|
||||
--network zap-net \
|
||||
-v ${{ github.workspace }}:/zap/wrk/:rw \
|
||||
@@ -61,7 +69,10 @@ jobs:
|
||||
-t http://apex-sandbox:3000 \
|
||||
-r report.html \
|
||||
-I -c zap-baseline.conf
|
||||
|
||||
docker cp zap-scanner:/zap/wrk/report.html qatests/report.html || true
|
||||
|
||||
echo ">>> Limpeza final..."
|
||||
docker rm -f zap-scanner apex-sandbox || true
|
||||
docker network rm zap-net || true
|
||||
|
||||
|
||||
Reference in New Issue
Block a user