|
1 | | - name: Test site for publicly known js vulnerabilities |
2 | | - |
3 | | -on: push |
4 | | -jobs: |
5 | | - security: |
6 | | - runs-on: ubuntu-latest |
7 | | - steps: |
8 | | - - name: Test for public javascript library vulnerabilities |
9 | | - uses: lirantal/is-website-vulnerable@main |
10 | | - with: |
11 | | - scan-url: "https://*.*.com" |
12 | | - |
| 1 | + - name: Sauce Security Action |
| 2 | + # You may pin to the exact commit or the version. |
| 3 | + # uses: saucelabs/sauce-security-action@5008ddffb96db501fc71486cad3950304a73a2d5 |
| 4 | + |
| 5 | + with: |
| 6 | + # Sauce Labs user name. |
| 7 | + username: |
| 8 | + # Sauce Labs API Key. |
| 9 | + accessKey: |
| 10 | + # Url to the application under test. |
| 11 | + target: |
| 12 | + # An url to an OpenAPI specification to help scan the full API. |
| 13 | + openapi: # optional |
| 14 | + # An url to a graphql schema to help scan the full API. |
| 15 | + graphql: # optional |
| 16 | + # Amount of severe vulnerabilities that are allowed to be discovered - if set to `-1` these will be ignored. (Default: 0) |
| 17 | + allowedSevereVulnerabilties: # optional, default is 0 |
| 18 | + # Amount of medium vulnerabilities that are allowed to be discovered - if set to `-1` these will be ignored. (Default: 0) |
| 19 | + allowedMediumVulnerabilties: # optional, default is 0 |
| 20 | + # Amount of low vulnerabilities that are allowed to be discovered - if set to `-1` these will be ignored. (Default: 0) |
| 21 | + allowedLowVulnerabilties: # optional, default is 0 |
| 22 | + # Amount of informational vulnerabilities that are allowed to be discovered - if set to `-1` these will be ignored. (Default: 0) |
| 23 | + allowedInformationalVulnerabilties: # optional, default is -1 |
| 24 | + # If set to true, this action will download Zap reports for you to attach to the job via actions/upload-artifact |
| 25 | + downloadReports: # optional |
| 26 | + # If set to true, this action will download all Sauce Labs job assets for you to attach to the job via actions/upload-artifact |
| 27 | + downloadJobAssets: # optional |
13 | 28 |
|
0 commit comments