Merge pull request #204 from bcgov/yj

chore: added zap scan
bcgov · Apr 23, 2024 · 44c12a1 · 44c12a1
2 parents 7ab930a + 918c5ca
commit 44c12a1
Show file tree

Hide file tree

Showing 2 changed files with 28 additions and 2 deletions.
diff --git a/.github/workflows/deploy-dev.yml b/.github/workflows/deploy-dev.yml
@@ -169,4 +169,30 @@ jobs:
         ENV_NAME=dev \
         IMAGE_TAG_FRONTEND=latest \
         IMAGE_TAG_BACKEND=latest \
-      working-directory: ./helm/main
+      working-directory: ./helm/main
+
+    - name: Wait for deployment to be ready
+      run: |
+        while [[ "$(oc get deployment strdss-dev -n f4a30d-dev -o jsonpath='{.status.readyReplicas}')" != "1" ]]; do
+          echo "Waiting for deployment to be ready..."
+          sleep 10
+        done
+      timeout-minutes: 5
+
+  zap-scan:
+    runs-on: ubuntu-22.04
+    timeout-minutes: 10
+    permissions:
+      contents: read
+      issues: write
+
+    steps:
+    - uses: hmarr/debug-action@a701ed95a46e6f2fb0df25e1a558c16356fae35a
+    - uses: actions/checkout@96f53100ba2a5449eb71d2e6604bbcd94b9449b5
+      with:
+        ref: main
+    - name: ZAP Scan
+      uses: zaproxy/action-full-scan@c8994d4f913cf872ec9964ac2d998c9bec369060
+      with:
+        token: ${{ secrets.GITHUB_TOKEN }}
+        target: https://dev-strdata.apps.silver.devops.gov.bc.ca/
diff --git a/.github/workflows/deploy-test.yml b/.github/workflows/deploy-test.yml
@@ -93,4 +93,4 @@ jobs:
         ENV_NAME=test \
         IMAGE_TAG_FRONTEND=${vtag//v} \
         IMAGE_TAG_BACKEND=${vtag//v} \
-      working-directory: ./helm/main
+      working-directory: ./helm/main