{"id":28466834,"url":"https://github.com/zaproxy/action-af","last_synced_at":"2025-06-30T23:31:25.870Z","repository":{"id":42049230,"uuid":"481560892","full_name":"zaproxy/action-af","owner":"zaproxy","description":"A GitHub Action for running ZAP Automation Framework plans","archived":false,"fork":false,"pushed_at":"2025-01-24T09:21:33.000Z","size":33,"stargazers_count":17,"open_issues_count":0,"forks_count":8,"subscribers_count":7,"default_branch":"main","last_synced_at":"2025-06-07T07:06:06.636Z","etag":null,"topics":["actions","dast","devsecops","github-actions","security"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/zaproxy.png","metadata":{"funding":{"custom":["https://www.zaproxy.org/sponsor/"]},"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-04-14T10:24:00.000Z","updated_at":"2025-04-19T14:42:25.000Z","dependencies_parsed_at":"2024-04-23T18:00:47.122Z","dependency_job_id":"e6f39994-7b56-41df-b6b4-ca9a5ad4e037","html_url":"https://github.com/zaproxy/action-af","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/zaproxy/action-af","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zaproxy%2Faction-af","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zaproxy%2Faction-af/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zaproxy%2Faction-af/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zaproxy%2Faction-af/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/zaproxy","download_url":"https://codeload.github.com/zaproxy/action-af/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zaproxy%2Faction-af/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":262867631,"owners_count":23377095,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["actions","dast","devsecops","github-actions","security"],"created_at":"2025-06-07T07:06:06.657Z","updated_at":"2025-06-30T23:31:25.862Z","avatar_url":"https://github.com/zaproxy.png","language":"JavaScript","funding_links":["https://www.zaproxy.org/sponsor/"],"categories":[],"sub_categories":[],"readme":"# action-af\nA GitHub Action for running [ZAP Automation Framework](https://www.zaproxy.org/docs/automate/automation-framework/) plans.\n\n## Inputs\n\n### `plan`\n\n**Required** The file system path or URL to the Automation Framework plan to run.\n\n### `docker_name`\n\n**Optional** if specified must not be empty. The name of the [ZAP Docker image](https://www.zaproxy.org/docs/docker/about/#install-instructions) to be used. By default the action runs the stable image.\n\n### `docker_env_vars`\n\n**Optional** The names of the environment variables that should be passed to the Docker container for use in the plan, e.g.:\n```yaml\ndocker_env_vars: |\n  MY_TARGET_URL\n  MY_USER_NAME\n  MY_USER_PASSWORD\n```\nSee also [Environment variables](#environment-variables).\n\n### `cmd_options`\n\n**Optional** Additional [command line options](https://www.zaproxy.org/docs/desktop/cmdline/) for ZAP.\n\n## Exit Value\n\nThe action will exit with the value of the plan, as indicated in the [Automation Framework documentation](https://www.zaproxy.org/docs/automate/automation-framework/#exit-value).\n\n## Files\n\nFiles created with the plan that need to be used after the plan has finished should be saved to the `/zap/wrk/` directory, which is mapped to the [GITHUB_WORKSPACE](https://docs.github.com/en/actions/learn-github-actions/variables) directory.\n\n## Environment variables\n\nIf set, the following [ZAP authentication environment variables](https://www.zaproxy.org/docs/authentication/handling-auth-yourself/#authentication-env-vars)\nwill be copied into the Docker container:\n\n- `ZAP_AUTH_HEADER_VALUE`\n- `ZAP_AUTH_HEADER`\n- `ZAP_AUTH_HEADER_SITE`\n\n## Example usage\n\n```yaml\nsteps:\n  - name: ZAP Scan\n    uses: zaproxy/action-af@v0.2.0\n    with:\n      plan: '.github/workflows/zap/plan.yml'\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fzaproxy%2Faction-af","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fzaproxy%2Faction-af","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fzaproxy%2Faction-af/lists"}