ZAP DAST from Config

uses: huntridge-labs/argus/.github/workflows/scanner-zap-from-config.yml@1.8.1

Pipeline

3 jobs (1 matrix) · scroll to zoom · drag to pan

Triggers

• Manual dispatch
• Reusable (called by other workflows)

Permissions

Scope	Access
contents	read
security-events	write
actions	read
pull-requests	write
id-token	write
packages	read

Inputs

Input	Description	Required	Default
config_file	Path to ZAP config file (YAML, JSON, or JS) string	Yes	—

Jobs

parse-config — Parse ZAP Config

Runs on: ubuntu-latest

Steps:

1. Checkout repository — actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
2. Parse ZAP config — huntridge-labs/argus/.github/actions/parse-zap-config@1.8.1

Actions used:

• 🕷️ parse-zap-config — Parse ZAP Config

zap-scan — ZAP ${{ matrix.name }}

Runs on: ubuntu-latest · Timeout: 60 minutes · Depends on: parse-config · Continue on error: Yes · Condition: needs.parse-config.outputs.has_scans == 'true'

Steps:

1. Checkout repository — actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
2. Set up Python — actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1
3. Install Argus — huntridge-labs/argus/.github/actions/setup-argus@1.8.1
4. Run scan
5. Upload artifacts — actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

zap-summary — ZAP Summary

Runs on: ubuntu-latest · Depends on: parse-config, zap-scan · Condition: always()

Steps:

1. Generate ZAP summary — huntridge-labs/argus/.github/actions/scanner-zap-summary@1.8.1

Actions used:

• 🕷️ scanner-zap-summary — ZAP Summary Generator

All Composite Actions Referenced

• 🕷️ parse-zap-config — Parse ZAP Config
• 🕷️ scanner-zap-summary — ZAP Summary Generator