zaproxy / zaproxy/action-baseline
GitHub Code Scanning Integration
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 372
- Forks
- 62
- Avg merge
- 11h 6m
- Merged PRs (30d)
- 3
Description
👋🏽 ZAproxy team,
Thank you for building this Action. I took the liberty to create an actions that maps the ZAProxy results to SARIF so they can be displayed in the GitHub Advanced Security UI.
You can check it out here: https://github.com/SvanBoxel/zaproxy-to-ghas
Optionally we could decide to merge this action into zaproxy/action-baseline so it becomes easier for users to leverage this scanning utility.
Disclaimer: I know, SARIF isn’t made for DAST results, but having the ability to view all security results through a single pane of glass can be very beneficial.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the linked zaproxy-to-ghas action and the discussion in this issue, then inspect how zaproxy/action-baseline is structured. Done means reaching and documenting a decision on whether SARIF conversion should be merged into this action, with the integration scope agreed.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions, javascript
- Domain
- devops, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100