forked from zaproxy/action-api-scan
-
Notifications
You must be signed in to change notification settings - Fork 0
/
action.yml
42 lines (42 loc) · 1.22 KB
/
action.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
name: 'OWASP ZAP API Scan'
description: 'Scans the web application with the OWASP ZAP API Scan'
branding:
icon: 'zap'
color: 'blue'
inputs:
token:
description: 'GitHub Token to create issues in the repository'
required: false
default: ${{ github.token }}
target:
description: 'Target URL'
required: true
format:
description: 'Format openapi, soap or graphql'
required: false
default: openapi
rules_file_name:
description: 'Relative path of the ZAP configuration file'
required: false
docker_name:
description: 'The Docker file to be executed'
required: true
default: 'owasp/zap2docker-stable'
cmd_options:
description: 'Additional command line options'
required: false
issue_title:
description: 'The title for the GitHub issue to be created'
required: false
default: 'ZAP API Scan Report'
fail_action:
description: 'The action status will be set to fail if ZAP identifies any alerts during the api scan'
required: false
default: false
allow_issue_writing:
description: 'The action will file the report to the GitHub issue using the issue_title input'
required: false
default: true
runs:
using: 'node16'
main: 'dist/index.js'