Merge pull request #813 from bcgov/yj

chore: zap api
bcgov · Nov 25, 2024 · 86ef4ae · 86ef4ae
2 parents 4bf1676 + ec5ab2e
commit 86ef4ae
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/.github/workflows/deploy-dev.yml b/.github/workflows/deploy-dev.yml
@@ -18,6 +18,7 @@ on:
       - crunchydb/**
       - backup-container/**
       - gateway/**
+      - .github/**
 
 jobs:
   test-backend:

diff --git a/.github/workflows/zap-api-scan.yml b/.github/workflows/zap-api-scan.yml
@@ -7,6 +7,14 @@ on:
         type: string
         description: The URL of the OpenAPI/GraphQL spec
         default: https://dev.strdata.gov.bc.ca/api/swagger/strdata/swagger.json
+      auth_header_name:
+        type: string
+        description: The name of the authentication header
+        default: Authorization
+      auth_header_value:
+        type: string
+        description: The value of the authentication header
+        default: Bearer your_token
 
 jobs:
   zap-api-scan:
@@ -15,6 +23,9 @@ jobs:
     permissions:
       contents: read
       issues: write
+    env:
+      ZAP_AUTH_HEADER_NAME: ${{ github.event.inputs.auth_header_name }}
+      ZAP_AUTH_HEADER_VALUE: ${{ github.event.inputs.auth_header_value }}
 
     steps:
       - name: Checkout