Change dockerimage for zap

CMU-17313Q · Oct 27, 2024 · e6e6cd0 · e6e6cd0
1 parent 7f1f08f
commit e6e6cd0
Showing 1 changed file with 4 additions and 6 deletions.
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
@@ -78,12 +78,10 @@ jobs:
           node app --setup="${SETUP}" --ci="${CI}"
 
       - name: Run OWASP ZAP Docker Scan
-        uses: zaproxy/[email protected]
-        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
-          target: 'https://localhost:4567/'
-          rules_file_name: '.zap/rules.tsv'
-          cmd_options: '-a'
+        run: |
+          docker run -v $(pwd):/zap/wrk/:rw -t ghcr.io/zaproxy/zaproxy:stable zap-baseline.py -t http://localhost:4567 -r zap_report.html -a
+        env:
+          TARGET: 'http://localhost:4567'
 
       - name: Run ESLint
         run: npm run lint