fix: zap scan (#135)

* fix: ZAP SCAN URL in scheduled * adding ZAP scan to main merge
bcgov · Apr 23, 2024 · aa94acd · aa94acd
1 parent ae982d6
commit aa94acd
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 1 deletion.
diff --git a/.github/workflows/merge.yml b/.github/workflows/merge.yml
@@ -49,6 +49,21 @@ jobs:
           parameters:
             -p ZONE=test -p PROMOTE=${{ github.repository }}/${{ matrix.name }}:${{ needs.vars.outputs.pr }} -p MAX_REPLICAS=3
 
+  zap_scan:
+    runs-on: ubuntu-22.04
+    needs: [deploys, vars]
+    name: Penetration Tests
+    env:
+      URL: ${{ github.event.repository.name }}-test-frontend.apps.silver.devops.gov.bc.ca
+    steps:
+      - name: ZAP Scan
+        uses: zaproxy/action-full-scan@v0.10.0
+        with:
+          allow_issue_writing: true
+          artifact_name: "zap_rctool"
+          cmd_options: "-a"
+          issue_title: "ZAP: rctool"
+          target: https://${{ env.URL }}
   promotions:
     name: Promote Images
     needs: [deploys, vars]

diff --git a/.github/workflows/scheduled.yml b/.github/workflows/scheduled.yml
@@ -54,7 +54,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Penetration Tests
     env:
-      URL: ${{ github.event.repository.name }}-test-test-frontend.apps.silver.devops.gov.bc.ca/rctool/
+      URL: ${{ github.event.repository.name }}-test-frontend.apps.silver.devops.gov.bc.ca
     steps:
       - name: ZAP Scan
         uses: zaproxy/action-full-scan@v0.10.0