OWASP ZAP daily scan #130

	name: OWASP ZAP daily scan

	on:
	schedule:
	# cron format: 'minute hour dayofmonth month dayofweek'
	# this will run at noon UTC every day (7am EST / 8am EDT)
	- cron: '0 12 * * *'

	permissions:
	contents: read
	issues: write

	jobs:
	owasp-scan:
	name: OWASP ZAP Scan
	runs-on: ubuntu-latest
	services:
	postgres:
	image: postgres
	options: >-
	--health-cmd pg_isready
	--health-interval 10s
	--health-timeout 5s
	--health-retries 5
	ports: ["5432:5432"]
	env:
	POSTGRES_DB: continuous_monitoring_test
	POSTGRES_USER: cidbuser
	POSTGRES_PASSWORD: postgres

	steps:
	- uses: actions/checkout@v4

	- id: setup
	uses: ./.github/actions/setup-project

	- uses: ./.github/actions/run-server
	with:
	database_url: ${{ steps.setup.outputs.database_url }}

	- name: Run OWASP Full Scan
	uses: zaproxy/action-full-scan@v0.10.0
	with:
	token: ${{ secrets.GITHUB_TOKEN }}
	docker_name: 'ghcr.io/zaproxy/zaproxy:weekly'
	target: 'http://localhost:3000/'
	fail_action: true
	rules_file_name: 'zap.conf'
	cmd_options: '-I'

Provide feedback