diff --git a/.github/workflows/dast.yaml b/.github/workflows/dast.yaml index 2016703..89df799 100644 --- a/.github/workflows/dast.yaml +++ b/.github/workflows/dast.yaml @@ -1,19 +1,19 @@ -name: DAST - -on: - push: - branches: [ main, master ] - pull_request: - branches: [ main, master ] - -jobs: - scan: - runs-on: ubuntu-22.04 - steps: - - name: Checkout code - uses: actions/checkout@v4 - - - name: ZAP Scan - uses: zaproxy/action-baseline@v0.12.0 - with: - target: 'https://www.zaproxy.org/' \ No newline at end of file +#name: DAST +# +#on: +# push: +# branches: [ main, master ] +# pull_request: +# branches: [ main, master ] +# +#jobs: +# scan: +# runs-on: ubuntu-22.04 +# steps: +# - name: Checkout code +# uses: actions/checkout@v4 +# +# - name: ZAP Scan +# uses: zaproxy/action-baseline@v0.12.0 +# with: +# target: 'https://www.zaproxy.org/' \ No newline at end of file diff --git a/.github/workflows/sast.yaml b/.github/workflows/sast.yaml index 8e89fb2..410d85d 100644 --- a/.github/workflows/sast.yaml +++ b/.github/workflows/sast.yaml @@ -18,8 +18,8 @@ jobs: with: scan-type: 'config' format: 'table' - hide-progress: false - output: trivy-config.txt + hide-progress: true + output: 'trivy-config.txt' - name: Publish Trivy Output to Summary run: | @@ -45,8 +45,9 @@ jobs: with: scan-type: 'fs' format: 'table' - hide-progress: false - output: trivy-fs.txt + ignore-unfixed: true + output: 'trivy-fs.txt' + severity: 'LOW' - name: Publish Trivy Output to Summary run: |