Skip to content

Commit f3ec4f9

Browse files
authored
Merge pull request kaakaww#39 from kaakaww/actions-guidetorial
Adds new stackhawk configuration file for github actions tutorial
2 parents 3be1a69 + 4d37fa2 commit f3ec4f9

File tree

1 file changed

+63
-0
lines changed

1 file changed

+63
-0
lines changed

stackhawk-actions.yml

Lines changed: 63 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,63 @@
1+
app:
2+
# Update your applicationId
3+
applicationId: ${APP_ID:8454c127-64aa-490e-a151-54ae287ee8f1}
4+
env: ${APP_ENV:GitHub Actions}
5+
host: ${APP_HOST:https://localhost:9000}
6+
excludePaths:
7+
- "/logout"
8+
# - "/login-form-multi"
9+
# - "/login-code"
10+
antiCsrfParam: "_csrf"
11+
# Configure Basic Authentication
12+
authentication:
13+
loggedInIndicator: "\\QSign Out\\E"
14+
loggedOutIndicator: ".*Location:.*/login.*"
15+
usernamePassword:
16+
type: FORM
17+
loginPath: /login
18+
loginPagePath: /login
19+
usernameField: username
20+
passwordField: password
21+
scanUsername: "user"
22+
scanPassword: "password"
23+
cookieAuthorization:
24+
cookieNames:
25+
- "JSESSIONID"
26+
testPath:
27+
path: /search
28+
success: "HTTP.*200.*"
29+
# Utilize OpenAPI Spec, Custom data & Faker
30+
openApiConf:
31+
# path: /openapi
32+
filePath: openapi.yaml
33+
fakerEnabled: true #default false
34+
# includeAllMethods: true
35+
includedMethods:
36+
- POST
37+
- PUT
38+
customVariables:
39+
- field: text
40+
values:
41+
- "$faker:uuid"
42+
- field: searchText
43+
values:
44+
- "$faker:Crypto.sha512"
45+
- "Donec ullamcorper nulla non metus auctor fringilla."
46+
- field: username
47+
values:
48+
- "Andy Dwyer"
49+
- field: password
50+
values:
51+
- "$faker:password"
52+
hawk:
53+
spider:
54+
maxDurationMinutes: 5
55+
# config:
56+
# - "scanner.analyser.redirectEqualsNotFound=false"
57+
# - "scanner.analyser.followRedirect=true"
58+
# Grab Commit SHA and Branch name
59+
tags:
60+
- name: _STACKHAWK_GIT_COMMIT_SHA
61+
value: ${COMMIT_SHA:}
62+
- name: _STACKHAWK_GIT_BRANCH
63+
value: ${BRANCH_NAME:}

0 commit comments

Comments
 (0)