baseline-scan-wf.yml

name: "ZAP - Baseline Scan"


on:
  push:
    branches: [ main ]
  schedule:
      - cron:  '0 0 1 * *' ##execution of a task in the first minute of the month 


jobs:

# https://www.zaproxy.org/docs/docker/baseline-scan/
 ubuntu-latest-zap-Baseline-job:
    name: "ZAP - Baseline Scan"
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v2
    - name: "os fingerprinting"
      run: hostnamectl status  
    - name: "ZAP - Baseline Scan"
      run: | 
        # Error: Process completed with exit code 2.
        docker run -t owasp/zap2docker-stable \
          zap-baseline.py -t http://testphp.vulnweb.com
        # Error: Process completed with exit code 2.
        # docker run -t owasp/zap2docker-stable \
        # zap-baseline.py -t http://testphp.vulnweb.com >/dev/null  
        # Error: Process completed with exit code 3     
        # docker run -t --rm owasp/zap2docker-stable sh -c "zap-baseline.py -t http://testphp.vulnweb.com 2>/dev/null"


# https://www.zaproxy.org/docs/docker/baseline-scan/
 ubuntu-latest-zap-Baseline-report-job:
    name: "ZAP - Baseline Scan report"
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v2
    - name: "os fingerprinting"
      run: hostnamectl status  
    - name: "ZAP - Baseline Scan report"
      run: | 
        docker run -v $(pwd):/zap/wrk/:rw -t owasp/zap2docker-stable zap-baseline.py \
          -t https://www.example.com -g gen.conf -r testreport.html

# https://www.zaproxy.org/docs/docker/scan-hooks/
 ubuntu-latest-zap-Baseline-hooks-job:
    name: "ZAP - Baseline Scan hooks"
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v2
    - name: "os fingerprinting"
      run: hostnamectl status  
    - name: "ZAP - Baseline Scan hooks"
      run: | 
        # Error: Process completed with exit code 3.
        # PermissionError: [Errno 13] Permission denied: '/zap/wrk/gen.conf'
        sudo docker run -v $(pwd):/zap/wrk/:rw -t owasp/zap2docker-stable \
          zap-baseline.py -t https://www.example.com -g gen.conf \
          -r testreport.html --hook=/zap/wrk/my-hooks.py