Skip to content

Commit 8878026

Browse files
Update devsecops-workflow.yaml
1 parent 60c3ea4 commit 8878026

File tree

1 file changed

+5
-6
lines changed

1 file changed

+5
-6
lines changed

.github/workflows/devsecops-workflow.yaml

Lines changed: 5 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ jobs:
99
- uses: actions/checkout@v3
1010
- uses: actions/setup-node@v3
1111
with:
12-
node-version: 16
12+
node-version: 21
1313
cache: npm
1414
- run: npm install
1515
- name: SonarCloud Scan
@@ -19,8 +19,8 @@ jobs:
1919
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
2020
with:
2121
args: >
22-
-Dsonar.organization=devsecopsgithubactionsnodejsproject
23-
-Dsonar.projectKey=devsecopsganodejsprojectkey
22+
-Dsonar.organization=dotnetgithubactionsorg
23+
-Dsonar.projectKey=dotnetgithubactionsproject
2424
security:
2525
runs-on: ubuntu-latest
2626
needs: build
@@ -38,13 +38,12 @@ jobs:
3838
name: Run DAST scan on the web application
3939
steps:
4040
- name: Checkout
41-
uses: actions/checkout@v2
41+
uses: actions/checkout@v4
4242
with:
4343
ref: master
4444
- name: ZAP Scan
45-
uses: zaproxy/action-baseline@v0.6.1
45+
uses: zaproxy/action-baseline@v0.14.0
4646
with:
47-
docker_name: 'owasp/zap2docker-stable'
4847
target: 'http://example.com/'
4948
rules_file_name: '.zap/rules.tsv'
5049
cmd_options: '-a'

0 commit comments

Comments
 (0)