Merge pull request #211 from bcgov/yj

chore: zap scan rules
bcgov · Apr 23, 2024 · e1b23df · e1b23df
2 parents 20dca15 + 878142f
commit e1b23df
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/.github/workflows/deploy-dev.yml b/.github/workflows/deploy-dev.yml
@@ -193,4 +193,5 @@ jobs:
       uses: zaproxy/action-full-scan@c8994d4f913cf872ec9964ac2d998c9bec369060
       with:
         token: ${{ secrets.GITHUB_TOKEN }}
-        target: https://dev-strdata.apps.silver.devops.gov.bc.ca/
+        target: https://dev-strdata.apps.silver.devops.gov.bc.ca/
+        rules_file_name: '.zap/rules.tsv'
diff --git a/.zap/rules.tsv b/.zap/rules.tsv
@@ -0,0 +1,7 @@
+40035 IGNORE	(Hidden File Found)
+40025 IGNORE	(Proxy Disclosure)
+10096 IGNORE  (Timestamp Disclosure - Unix)
+10027 IGNORE	(Information Disclosure - Suspicious Comments)
+10109 IGNORE  (Modern Web Application)
+10049 IGNORE  (Non-Storable Content)
+10104 IGNORE  (	User Agent Fuzzer)