Merge pull request #813 from bcgov/yj

chore: zap api

Author: ychung-mot

.github/workflows/deploy-dev.yml

@@ -18,6 +18,7 @@ on:
       - crunchydb/**
       - backup-container/**
       - gateway/**
+      - .github/**
 
 jobs:
   test-backend:

.github/workflows/zap-api-scan.yml

@@ -7,6 +7,14 @@ on:
         type: string
         description: The URL of the OpenAPI/GraphQL spec
         default: https://dev.strdata.gov.bc.ca/api/swagger/strdata/swagger.json
+      auth_header_name:
+        type: string
+        description: The name of the authentication header
+        default: Authorization
+      auth_header_value:
+        type: string
+        description: The value of the authentication header
+        default: Bearer your_token
 
 jobs:
   zap-api-scan:
@@ -15,6 +23,9 @@ jobs:
     permissions:
       contents: read
       issues: write
+    env:
+      ZAP_AUTH_HEADER_NAME: ${{ github.event.inputs.auth_header_name }}
+      ZAP_AUTH_HEADER_VALUE: ${{ github.event.inputs.auth_header_value }}
 
     steps:
       - name: Checkout