test context

Enterprise-CMCS · Jul 12, 2023 · 3c3cbc4 · 3c3cbc4
1 parent a2800a5
commit 3c3cbc4
Show file tree

Hide file tree

Showing 2 changed files with 36 additions and 14 deletions.
diff --git a/.github/workflows/eval-context.json b/.github/workflows/eval-context.json
@@ -0,0 +1,17 @@
+[
+    {
+      "contextName": "MyContext",
+      "includeRegexes": ["^https?://mdctmcrval.cms.gov/"],
+      "excludeRegexes": [],
+      "authentication": {
+        "method": "formBasedAuthentication",
+        "loginUrl": "https://cognito-idp.us-east-1.amazonaws.com",
+        "loginRequestData": "username=internaluser@test.com&password=PB74y*MfPFNT",
+        "loginRequestType": "POST",
+        "loginRequestHeaders": {
+          "Content-Type": "application/x-www-form-urlencoded"
+        },
+        "loginRequestCookies": []
+      }
+    }
+  ]
diff --git a/.github/workflows/zap-scan.yml b/.github/workflows/zap-scan.yml
@@ -22,18 +22,23 @@ jobs:
         uses: zaproxy/action-baseline@v0.7.0
         with:
           target: "https://d4m0mp24tl7ig.cloudfront.net/"
+          cmd_options: --context-file $GITHUB_WORKSPACE/.github/workflows/eval-context.json
+      - name: Cat output
+        run: | 
+          cat report_json.json
+
         
-      - name: Parse Zap output and create Jira tickets
-        uses: Enterprise-CMCS/macfc-security-scan-report@v1.0.3
-        with:
-          jira-username: ${{ secrets.JIRA_SERVICE_USERNAME }}
-          jira-token: ${{ secrets.JIRA_SERVICE_USER_TOKEN }}
-          jira-host: 'qmacbis.atlassian.net'
-          jira-project-key: 'MDCT'
-          jira-issue-type: 'Task'
-          jira-custom-field-key-value: '{ "customfield_10007" : "MDCT-2280", "customfield_14154" : [{"id": "16958", "value": "MCR"}] }'
-          jira-labels: 'MCR,zap'
-          jira-title-prefix: '[MCR] - Zap :'
-          zap-risk-code: '2'
-          scan-output-path: 'report_json.json'
-          scan-type: 'zap'
+      # - name: Parse Zap output and create Jira tickets
+      #   uses: Enterprise-CMCS/macfc-security-scan-report@v1.0.3
+      #   with:
+      #     jira-username: ${{ secrets.JIRA_SERVICE_USERNAME }}
+      #     jira-token: ${{ secrets.JIRA_SERVICE_USER_TOKEN }}
+      #     jira-host: 'qmacbis.atlassian.net'
+      #     jira-project-key: 'MDCT'
+      #     jira-issue-type: 'Task'
+      #     jira-custom-field-key-value: '{ "customfield_10007" : "MDCT-2280", "customfield_14154" : [{"id": "16958", "value": "MCR"}] }'
+      #     jira-labels: 'MCR,zap'
+      #     jira-title-prefix: '[MCR] - Zap :'
+      #     zap-risk-code: '2'
+      #     scan-output-path: 'report_json.json'
+      #     scan-type: 'zap'