[MDS-4940] Adding zapscan for minespace, coreweb, and coreapi#3626
[MDS-4940] Adding zapscan for minespace, coreweb, and coreapi#3626
Conversation
There was a problem hiding this comment.
Pull Request Overview
This PR adds ZAP (OWASP Zed Attack Proxy) security scanning workflows for frontend applications including MineSpace and Core Web. The implementation sets up automated daily security scans that can also be triggered manually.
Key changes:
- Added scheduled ZAP baseline scans for two frontend applications
- Configured workflows to run daily at 08:00 UTC and support manual triggers
- Set up artifact upload for scan reports
Reviewed Changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
.github/workflows/zap-scan-minespace.yaml |
Adds ZAP security scanning workflow for MineSpace frontend application |
.github/workflows/zap-scan-core-web.yaml |
Adds ZAP security scanning workflow for Core Web frontend application |
Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
|
|
||
| on: | ||
| schedule: | ||
| - cron: "0 8 * * *" # Runs at 08:00 UTC (Midnight PST) |
There was a problem hiding this comment.
The comment incorrectly states "Midnight PST". 08:00 UTC is actually 1:00 AM PST (or 12:00 AM PDT during daylight saving time), not midnight.
| - cron: "0 8 * * *" # Runs at 08:00 UTC (Midnight PST) | |
| - cron: "0 8 * * *" # Runs at 08:00 UTC (1:00 AM PST, or 12:00 AM PDT during daylight saving time) |
|
|
||
| on: | ||
| schedule: | ||
| - cron: "0 8 * * *" # Runs at 08:00 UTC (Midnight PST) |
There was a problem hiding this comment.
The comment incorrectly states "Midnight PST". 08:00 UTC is actually 1:00 AM PST (or 12:00 AM PDT during daylight saving time), not midnight.
| - cron: "0 8 * * *" # Runs at 08:00 UTC (Midnight PST) | |
| - cron: "0 8 * * *" # Runs at 08:00 UTC (1:00 AM PST, or 12:00 AM PDT during daylight saving time) |
Objective
MDS-4940