ZAP DAST from Config

uses: huntridge-labs/argus/.github/workflows/scanner-zap-from-config.yml@1.12.2

Pipeline

3 jobs (1 matrix) · scroll to zoom · drag to pan

Triggers

• Manual dispatch
• Reusable (called by other workflows)

Permissions

Scope	Access
contents	read
security-events	write
actions	read
pull-requests	write
id-token	write
packages	read

Inputs

Input	Description	Required	Default
allow_failure	When true (default) the scan never fails the job (non-blocking); when false, a scan crash or a fail_on_severity breac... boolean	No	True
config_file	Path to ZAP config file (YAML, JSON, or JS) string	Yes	—

Jobs

parse-config — Parse ZAP Config

Runs on: ubuntu-latest

Steps:

1. Checkout repository — actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
2. Parse ZAP config — huntridge-labs/argus/.github/actions/parse-zap-config@1.12.2

Actions used:

• 🕷️ parse-zap-config — Parse ZAP Config

zap-scan — ZAP ${{ matrix.name }}

Runs on: ubuntu-latest · Timeout: 60 minutes · Depends on: parse-config · Continue on error: Yes · Condition: needs.parse-config.outputs.has_scans == 'true'

Steps:

1. Checkout repository — actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
2. Set up Python — actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97
3. Install Argus — huntridge-labs/argus/.github/actions/setup-argus@1.12.2
4. Run scan
5. Upload artifacts — actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

zap-summary — ZAP Summary

Runs on: ubuntu-latest · Depends on: parse-config, zap-scan · Condition: always()

Steps:

1. Generate ZAP summary — huntridge-labs/argus/.github/actions/scanner-zap-summary@1.12.2

Actions used:

• 🕷️ scanner-zap-summary — ZAP Summary Generator

All Composite Actions Referenced

• 🕷️ parse-zap-config — Parse ZAP Config
• 🕷️ scanner-zap-summary — ZAP Summary Generator