-
Notifications
You must be signed in to change notification settings - Fork 68
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore: add zap scan #4569
chore: add zap scan #4569
Conversation
ba04674
to
956b3cc
Compare
83e0f72
to
7a73239
Compare
7a73239
to
89d735b
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Just a few questions but this is a great addition to our process. Many hours per month will be saved for better use. 🏆
scripts/create-test-users.js
Outdated
@@ -4,7 +4,7 @@ const factory = require('../test/api/support/factory'); | |||
const { authenticatedSession } = require('../e2e/auth-session'); | |||
|
|||
async function createUsers() { | |||
const user = await factory.user({ username: 'test-e2e-user' }); | |||
const user = await factory.user({ username: process.env.PAGES_TEST_USER || 'generic-test-user' }); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Do we want to update this user to belong to an org? Manage an org?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
we don't really have standardized fixture data for them to test against but having them in an org could be okay
Issues running this on admin/queues SPAs, closing for now |
Changes proposed in this pull request:
security considerations
This adds an admin test user to the database to scan sites, it is removed after scanning.