0
Fork 0
mirror of https://github.com/logto-io/logto.git synced 2024-12-16 20:26:19 -05:00
logto/.github/workflows/pen-tests.yml

40 lines
1 KiB
YAML
Raw Normal View History

2022-07-16 06:29:19 -05:00
name: Pen Tests
on:
# Be careful when using the workflow_run trigger
2022-07-21 01:39:53 -05:00
# https://github.community/t/workflow-run-completed-event-triggered-by-failed-workflow/128001/7
2022-07-16 06:29:19 -05:00
workflow_run:
workflows: [ "Release" ]
branches:
- master
types:
- completed
concurrency:
2023-01-18 22:22:17 -05:00
group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
2022-07-16 06:29:19 -05:00
cancel-in-progress: true
jobs:
2022-07-21 01:39:53 -05:00
zap-scan:
2022-07-16 06:29:19 -05:00
if: ${{ github.event.workflow_run.conclusion == 'success' }}
runs-on: ubuntu-latest
steps:
- name: Docker Compose up
run: |
curl -fsSL https://raw.githubusercontent.com/logto-io/logto/HEAD/docker-compose.yml |\
2022-07-16 06:41:29 -05:00
TAG=edge docker compose -p logto -f - up -d
2022-07-16 06:29:19 -05:00
- name: Sleep for 30 seconds
run: sleep 30s
- name: ZAP Scan
uses: zaproxy/action-full-scan@v0.5.1
2022-07-16 06:29:19 -05:00
with:
target: http://localhost:3001
cmd_options: '-a'
fail_action: true
2023-01-03 02:40:21 -05:00
allow_issue_writing: false
# TODO: send slack message on failure