Upgrade GH Action for OWASP scanners

The docker images previously referenced do not seem to exist anymore. Let's upgrade these actions in hopes that their new default configuration is valid.
DSACMS · Apr 23, 2024 · b3e05fc · b3e05fc
1 parent d3a07cb
commit b3e05fc
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 4 deletions.
diff --git a/.github/workflows/owasp-daily-scan.yml b/.github/workflows/owasp-daily-scan.yml
@@ -35,9 +35,8 @@ jobs:
           database_url: ${{ steps.setup.outputs.database_url }}
 
       - name: Run OWASP Full Scan
-        uses: zaproxy/action-full-scan@v0.3.0
+        uses: zaproxy/action-full-scan@v0.10.0
         with:
-          docker_name: 'owasp/zap2docker-weekly'
           target: 'http://localhost:3000/'
           fail_action: true
           rules_file_name: 'zap.conf'

diff --git a/.github/workflows/owasp-scan.yml b/.github/workflows/owasp-scan.yml
@@ -38,9 +38,8 @@ jobs:
           database_url: ${{ steps.setup.outputs.database_url }}
 
       - name: Run OWASP Baseline Scan
-        uses: zaproxy/action-baseline@v0.6.1
+        uses: zaproxy/action-baseline@v0.12.0
         with:
-          docker_name: 'owasp/zap2docker-weekly'
           target: 'http://localhost:3000/'
           fail_action: true
           rules_file_name: 'zap.conf'