Merge pull request #65 from psiinon/auto-off

Disable the automation framework while we investigate a problem with it

Author: thc202

CHANGELOG.md

@@ -3,7 +3,9 @@ All notable changes to this GitHub action will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
-## [Unreleased]
+## [0.6.0] - 2021-10-08
+### Changed
+- Disabled the automation framework while we investigate a problem with it.
 
 ## [0.5.0] - 2021-09-14
 ### Added
@@ -38,7 +40,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 First release to Marketplace.
 
-[Unreleased]: https://github.com/zaproxy/action-baseline/compare/v0.5.0...HEAD
+[0.6.0]: https://github.com/zaproxy/action-baseline/compare/v0.5.0...v0.6.0
 [0.5.0]: https://github.com/zaproxy/action-baseline/compare/v0.4.0...v0.5.0
 [0.4.0]: https://github.com/zaproxy/action-baseline/compare/v0.3.0...v0.4.0
 [0.3.0]: https://github.com/zaproxy/action-baseline/compare/v0.2.0...v0.3.0

README.md

@@ -58,7 +58,7 @@ if it identifies any alerts. Set this option to `true` if you want to fail the s
 ```
 steps:
   - name: ZAP Scan
-    uses: zaproxy/action-baseline@v0.5.0
+    uses: zaproxy/action-baseline@v0.6.0
     with:
       target: 'https://www.zaproxy.org'
 ```
@@ -78,7 +78,7 @@ jobs:
         with:
           ref: master
       - name: ZAP Scan
-        uses: zaproxy/action-baseline@v0.5.0
+        uses: zaproxy/action-baseline@v0.6.0
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           docker_name: 'owasp/zap2docker-stable'

index.js

@@ -42,7 +42,7 @@ async function run() {
 
         await exec.exec(`docker pull ${docker_name} -q`);
         let command = (`docker run --user root -v ${workspace}:/zap/wrk/:rw --network="host" ` +
-            `-t ${docker_name} zap-baseline.py -t ${target} -J ${jsonReportName} -w ${mdReportName}  -r ${htmlReportName} ${cmdOptions}`);
+            `-t ${docker_name} zap-baseline.py --autooff -t ${target} -J ${jsonReportName} -w ${mdReportName}  -r ${htmlReportName} ${cmdOptions}`);
 
         if (plugins.length !== 0) {
             command = command + ` -c ${rulesFileLocation}`