ci: bump actions, only use scheduled zap (#134)

* ci: update deployer, stop pen tests in main merge

* Bump ZAP action

* Cleanup

* One more action bump

* ci: fix promote parameter removed

---------

Co-authored-by: Ricardo Campos <[email protected]>

.github/workflows/merge.yml

@@ -69,7 +69,7 @@ jobs:
               -p VITE_USER_POOLS_ID=${{ vars.VITE_USER_POOLS_ID }}
               -p VITE_USER_POOLS_WEB_CLIENT_ID=${{ vars.VITE_USER_POOLS_WEB_CLIENT_ID }}
     steps:
-      - uses: bcgov-nr/action-deployer-openshift@v1.4.0
+      - uses: bcgov-nr/action-deployer-openshift@v2.0.0
         with:
           file: ${{ matrix.name }}/openshift.deploy.yml
           oc_namespace: ${{ vars.OC_NAMESPACE }}
@@ -80,10 +80,6 @@ jobs:
             -p ZONE=test
             -p NAME=${{ github.event.repository.name }}
             ${{ matrix.parameters }}
-          penetration_test: true
-          penetration_test_artifact: ${{ matrix.name }}
-          penetration_test_issue: ${{ matrix.name }}
-          penetration_test_token: ${{ secrets.GITHUB_SECRET }}
 
   init-prod:
     name: PROD Init
@@ -92,7 +88,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: OpenShift Init
-        uses: bcgov-nr/action-deployer-openshift@v1.0.4
+        uses: bcgov-nr/action-deployer-openshift@v2.0.0
         with:
           oc_namespace: ${{ vars.OC_NAMESPACE }}
           oc_server: ${{ vars.OC_SERVER }}
@@ -118,7 +114,6 @@ jobs:
             parameters:
               -p VITE_USER_POOLS_ID=${{ vars.VITE_USER_POOLS_ID }}
               -p VITE_USER_POOLS_WEB_CLIENT_ID=${{ vars.VITE_USER_POOLS_WEB_CLIENT_ID }}
-              -p PROMOTE=${{ github.repository }}/frontend:test
     steps:
       - uses: bcgov-nr/[email protected]
         with:

.github/workflows/pentests.yml

@@ -20,7 +20,7 @@ jobs:
         component: [backend, frontend]
     steps:
       - name: ZAP Scan
-        uses: zaproxy/action-full-scan@v0.7.0
+        uses: zaproxy/action-full-scan@v0.8.0
         with:
           allow_issue_writing: true
           artifact_name: "zap_${{ matrix.component }}"