pm/website-test
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Modificar .gitea/workflows/deploy.yaml
DevSecOps Enterprise Pipeline / security-gate-and-deploy (push) Successful in 1m1s
Details

Browse Source 
deploy atualização
This commit is contained in:
pm
2026-05-08 15:58:34 +00:00
parent 1a2b983e56
commit 134462e684
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/deploy.yaml
+4 -3
View File
@@ -63,19 +63,20 @@ jobs:
# ETAPA 3: DAST - TESTE DINÂMICO (OWASP ZAP) # ETAPA 3: DAST - TESTE DINÂMICO (OWASP ZAP)
# ========================================== # ==========================================
# Ataca a Sandbox usando a rede interna do Docker (--link) e o nome do container # Ataca a Sandbox usando a rede interna do Docker (--link) e o nome do container.
# O parâmetro "-I" garante que a pipeline NÃO falha devido a avisos (warnings).
- name: OWASP ZAP Baseline Scan - name: OWASP ZAP Baseline Scan
run: | run: |
mkdir -p qatests mkdir -p qatests
chmod 777 qatests chmod 777 qatests
# Usamos o --link para o container do ZAP conseguir "ver" o container da sandbox diretamente
docker run --user root \ docker run --user root \
--link website-test-sandbox:website-test-sandbox \ --link website-test-sandbox:website-test-sandbox \
-v $(pwd)/qatests:/zap/wrk/:rw \ -v $(pwd)/qatests:/zap/wrk/:rw \
-t ghcr.io/zaproxy/zaproxy:stable zap-baseline.py \ -t ghcr.io/zaproxy/zaproxy:stable zap-baseline.py \
-t http://website-test-sandbox \ -t http://website-test-sandbox \
-r report.html -r report.html \
-I
# Garante que a Sandbox é desmantelada mesmo que o passo do ZAP falhe # Garante que a Sandbox é desmantelada mesmo que o passo do ZAP falhe
- name: Destruir Sandbox - name: Destruir Sandbox