diff --git a/.github/workflows/deploy-dev.yml b/.github/workflows/deploy-dev.yml index 61cbc76c..7a447762 100644 --- a/.github/workflows/deploy-dev.yml +++ b/.github/workflows/deploy-dev.yml @@ -193,4 +193,5 @@ jobs: uses: zaproxy/action-full-scan@c8994d4f913cf872ec9964ac2d998c9bec369060 with: token: ${{ secrets.GITHUB_TOKEN }} - target: https://dev-strdata.apps.silver.devops.gov.bc.ca/ \ No newline at end of file + target: https://dev-strdata.apps.silver.devops.gov.bc.ca/ + rules_file_name: '.zap/rules.tsv' \ No newline at end of file diff --git a/.zap/rules.tsv b/.zap/rules.tsv new file mode 100644 index 00000000..45f821db --- /dev/null +++ b/.zap/rules.tsv @@ -0,0 +1,7 @@ +40035 IGNORE (Hidden File Found) +40025 IGNORE (Proxy Disclosure) +10096 IGNORE (Timestamp Disclosure - Unix) +10027 IGNORE (Information Disclosure - Suspicious Comments) +10109 IGNORE (Modern Web Application) +10049 IGNORE (Non-Storable Content) +10104 IGNORE ( User Agent Fuzzer) \ No newline at end of file