Repository navigation

Penetration Tests #144

	name: Penetration Tests

	on:
	schedule: [cron: "0 11 * * 6"] # 3 AM PST = 12 PM UDT, Saturdays
	workflow_dispatch:

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true
	permissions: {}
	jobs:
	zap_scan:
	permissions:
	issues: write # Required for ZAP scan to create security issues
	runs-on: ubuntu-26.04
	name: Penetration Tests
	env:
	DOMAIN: apps.silver.devops.gov.bc.ca
	PREFIX: ${{ github.event.repository.name }}-test
	strategy:
	matrix:
	name: [backendJava, backendPy]
	steps:
	- name: ZAP Scan
	uses: zaproxy/action-full-scan@3c58388149901b9a03b7718852c5ba889646c27c # v0.13.0
	with:
	allow_issue_writing: true
	artifact_name: "zap_${{ matrix.name }}"
	cmd_options: "-a"
	issue_title: "ZAP: ${{ matrix.name }}"
	target: https://${{ env.PREFIX }}-${{ matrix.name }}.${{ env.DOMAIN }}