Skip to content

Commit 110ea1e

Browse files
Replace vulnerability test with Sauce Security Action
1 parent 5d29426 commit 110ea1e

File tree

1 file changed

+27
-12
lines changed

1 file changed

+27
-12
lines changed

.github/workflows/main.yml

Lines changed: 27 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,28 @@
1-
name: Test site for publicly known js vulnerabilities
2-
3-
on: push
4-
jobs:
5-
security:
6-
runs-on: ubuntu-latest
7-
steps:
8-
- name: Test for public javascript library vulnerabilities
9-
uses: lirantal/is-website-vulnerable@main
10-
with:
11-
scan-url: "https://*.*.com"
12-
1+
- name: Sauce Security Action
2+
# You may pin to the exact commit or the version.
3+
# uses: saucelabs/sauce-security-action@5008ddffb96db501fc71486cad3950304a73a2d5
4+
uses: saucelabs/[email protected]
5+
with:
6+
# Sauce Labs user name.
7+
username:
8+
# Sauce Labs API Key.
9+
accessKey:
10+
# Url to the application under test.
11+
target:
12+
# An url to an OpenAPI specification to help scan the full API.
13+
openapi: # optional
14+
# An url to a graphql schema to help scan the full API.
15+
graphql: # optional
16+
# Amount of severe vulnerabilities that are allowed to be discovered - if set to `-1` these will be ignored. (Default: 0)
17+
allowedSevereVulnerabilties: # optional, default is 0
18+
# Amount of medium vulnerabilities that are allowed to be discovered - if set to `-1` these will be ignored. (Default: 0)
19+
allowedMediumVulnerabilties: # optional, default is 0
20+
# Amount of low vulnerabilities that are allowed to be discovered - if set to `-1` these will be ignored. (Default: 0)
21+
allowedLowVulnerabilties: # optional, default is 0
22+
# Amount of informational vulnerabilities that are allowed to be discovered - if set to `-1` these will be ignored. (Default: 0)
23+
allowedInformationalVulnerabilties: # optional, default is -1
24+
# If set to true, this action will download Zap reports for you to attach to the job via actions/upload-artifact
25+
downloadReports: # optional
26+
# If set to true, this action will download all Sauce Labs job assets for you to attach to the job via actions/upload-artifact
27+
downloadJobAssets: # optional
1328

0 commit comments

Comments
 (0)