juice-shop

1
name: "ZAP Baseline Scan"
2

3
on:
4
  schedule:
5
    - cron:  '0 18 * * 6'
6

7
jobs:
8
  zap_scan:
9
    runs-on: ubuntu-latest
10
    name: Scan Juice Shop preview instance on Heroku
11
    steps:
12
      - name: Check out Git repository
13
        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac #v4.0.0
14
        with:
15
          ref: develop
16
      - name: ZAP Scan
17
        uses: zaproxy/action-baseline@41aee98ebc7cf2802c3beae4e7d4336413a21e43 # v0.9.0
18
        with:
19
          token: ${{ secrets.GITHUB_TOKEN }}
20
          target: 'https://preview.owasp-juice.shop'
21
          rules_file_name: '.zap/rules.tsv'
22
          cmd_options: '-a -j'
23