leftrightleft/SOOS DAST

The SOOS GitHub Action to perform the DAST Analysis

Trust Signals

Scorecard Score: not yet scored
Maintenance Recency: Stale
License: None

Inputs

name	description	required	default
client_id	SOOS Client Id	yes	—
api_key	SOOS API Key	yes	—
project_name	The project name that will be displayed on the dashboard. By Default is owner/repository_name	yes	${{ github.repository }}
scan_mode	SOOS DAST scan mode. Values available: baseline (Default), fullscan, and apiscan	yes	baseline
api_url	SOOS API URL	yes	https://api.soos.io/api/
target_url	Target URL to perform the scan against.	yes	—
debug	Show debug messages	no	false
ajax_spider	Enable the Ajax spider in addition to the traditional one	no	false
rules	rules file to use to INFO, IGNORE or FAIL warnings	no	—
context_file	Context file which will be loaded prior to scanning the target	no	—
context_user	Username to use for authenticated scans - must be defined in the given context file	no	—
full_scan_minutes	The number of minutes for spider to run (required if scanmode is fullScan)	no	—
api_scan_format	Target API format: openapi, soap, or graphql. Required for scan_mode: apiscan	no	—
active_scan_level	Minimum level to show: PASS (Default), IGNORE, INFO, WARN or FAIL	no	PASS
branch_uri	URI to branch from SCM system.	no	""
build_version	Version of application build artifacts.	no	""
build_uri	URI to CI build info.	no	""
operating_environment	System info regarding operating system, etc.	no	${{ runner.os }}
sarif	Generate SARIF Report	no	false
gpat	Github Personal Access Token to upload SARIF Report.	no	""
zap_options	ZAP Additional Options	no	—
request_cookies	Set Cookie values for the requests to the target URL	no	—
request_header	Set extra header requests	no	—

Outputs

no outputs