Modificar .gitea/workflows/deploy.yaml
DevSecOps Enterprise Pipeline / security-gate-and-deploy (push) Successful in 1m1s

atualizar deploy para download report
This commit is contained in:
pm
2026-05-08 16:47:03 +00:00
parent 666ec4ae28
commit 1a3296ae66
+13 -2
View File
@@ -62,6 +62,7 @@ jobs:
# ========================================== # ==========================================
# ETAPA 3: DAST - TESTE DINÂMICO (OWASP ZAP) # ETAPA 3: DAST - TESTE DINÂMICO (OWASP ZAP)
# ========================================== # ==========================================
- name: OWASP ZAP Baseline Scan - name: OWASP ZAP Baseline Scan
run: | run: |
mkdir -p qatests mkdir -p qatests
@@ -89,6 +90,12 @@ jobs:
docker rm -f zap-scanner || true docker rm -f zap-scanner || true
docker volume rm zap-reports || true docker volume rm zap-reports || true
# Garante que a Sandbox é desmantelada mesmo que o passo do ZAP falhe
- name: Destruir Sandbox
if: always()
run: |
docker rm -f website-test-sandbox || true
# ========================================== # ==========================================
# ETAPA 4: DEPLOY EM PRODUÇÃO (SÓ SE TUDO PASSAR) # ETAPA 4: DEPLOY EM PRODUÇÃO (SÓ SE TUDO PASSAR)
# ========================================== # ==========================================
@@ -113,13 +120,17 @@ jobs:
# ETAPA 5: ARTEFACTOS E NOTIFICAÇÕES # ETAPA 5: ARTEFACTOS E NOTIFICAÇÕES
# ========================================== # ==========================================
# Guarda o relatório interativo gerado pelo OWASP ZAP para poderes descarregar no Gitea - name: Compactar Relatório
if: always()
run: |
tar -czf qatests/owasp-zap-report.tar.gz -C qatests report.html
- name: Guardar Relatorio ZAP - name: Guardar Relatorio ZAP
if: always() if: always()
uses: actions/upload-artifact@v3 uses: actions/upload-artifact@v3
with: with:
name: owasp-zap-report name: owasp-zap-report
path: qatests/report.html path: qatests/owasp-zap-report.tar.gz
- name: Slack/Discord Notification - name: Slack/Discord Notification
if: always() if: always()