Skip to content

Commit

Permalink
Log in to az CLI again after scan
Browse files Browse the repository at this point in the history
Don't run at weekends when not monitored
  • Loading branch information
RobertGHippo committed Oct 11, 2024
1 parent 74d0036 commit 79d3b90
Showing 1 changed file with 11 additions and 2 deletions.
13 changes: 11 additions & 2 deletions .github/workflows/dev-security-check.yml
Original file line number Diff line number Diff line change
Expand Up @@ -2,8 +2,8 @@ name: ZAP Check - Dev

on:
schedule:
# Runs daily at 4am
- cron: "0 4 * * *"
# Runs daily at 4am, Monday through Friday
- cron: "0 4 * * 1-5"

jobs:

Expand Down Expand Up @@ -43,6 +43,15 @@ jobs:
allow_issue_writing: false
artifact_name: full_scan_dev

# Login to Azure (again) using OIDC
# ...the ZAP scan takes long enough that it is likely the Azure CLI login has expired by now
- name: Login to Azure CLI
uses: azure/login@v2
with:
client-id: ${{ secrets.AZURE_CLIENT_ID }}
tenant-id: ${{ secrets.AZURE_TENANT_ID }}
subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

# Reset app setting following security scan
- name: Reset the IsPublic flag
run: |
Expand Down

0 comments on commit 79d3b90

Please sign in to comment.