name: nullify-dast
on:
  push:
    branches:
      - main
  pull_request:
jobs:
  nullify-dast:
    name: Nullify DAST
    runs-on: ubuntu-20.04
    steps:
      - name: Checkout code
        uses: actions/checkout@v2
      - name: Run Nullify vulnerability scanner
        uses: nullify-platform/dast-action@main
        with:
          app-name: 'My REST API'
          header: 'Authorization: Bearer 1234'
          spec-path: 'openapi.json'
          target-host: 'api.myapp1234.dev'

name: nullify-dast-basic-auth
on:
  push:
    branches:
      - main
jobs:
  nullify-dast:
    name: Nullify DAST with Basic Auth
    runs-on: ubuntu-20.04
    steps:
      - name: Checkout code
        uses: actions/checkout@v2
      - name: Run Nullify vulnerability scanner
        uses: nullify-platform/dast-action@main
        with:
          app-name: 'My REST API'
          spec-path: 'openapi.json'
          target-host: 'api.myapp1234.dev'
          auth-method: 'basic'
          auth-username: ${{ secrets.API_USERNAME }}
          auth-password: ${{ secrets.API_PASSWORD }}
          local: 'true'

name: nullify-dast-oauth
on:
  schedule:
    - cron: '0 0 * * 1'  # Run weekly on Mondays
jobs:
  nullify-dast:
    name: Nullify DAST with OAuth2
    runs-on: ubuntu-20.04
    steps:
      - name: Checkout code
        uses: actions/checkout@v2
      - name: Run Nullify vulnerability scanner
        uses: nullify-platform/dast-action@main
        with:
          app-name: 'My OAuth API'
          spec-path: 'openapi.json'
          target-host: 'api.myapp1234.dev'
          auth-method: 'oauth2'
          auth-client-id: ${{ secrets.OAUTH_CLIENT_ID }}
          auth-client-secret: ${{ secrets.OAUTH_CLIENT_SECRET }}
          auth-token-url: 'https://auth.myapp1234.dev/oauth/token'
          auth-scope: 'read write'
          local: 'true'

name: nullify-dast-session
on:
  pull_request:
jobs:
  nullify-dast:
    name: Nullify DAST with Session Auth
    runs-on: ubuntu-20.04
    steps:
      - name: Checkout code
        uses: actions/checkout@v2
      - name: Run Nullify vulnerability scanner
        uses: nullify-platform/dast-action@main
        with:
          app-name: 'My Web App'
          spec-path: 'openapi.json'
          target-host: 'app.myapp1234.dev'
          auth-method: 'session'
          auth-login-url: 'https://app.myapp1234.dev/login'
          auth-login-body: '{"username":"${{ secrets.APP_USERNAME }}","password":"${{ secrets.APP_PASSWORD }}"}'
          auth-login-selector: 'response.headers.set-cookie'
          local: 'true'

name: nullify-dast
on:
  push:
    branches:
      - main
  pull_request:
jobs:
  nullify-dast:
    name: Nullify DAST
    runs-on: ubuntu-20.04
    steps:
      - name: Checkout code
        uses: actions/checkout@v2
      - name: Run Nullify vulnerability scanner
        uses: nullify-platform/dast-action@main
        with:
          nullify-host: api.mycompany.nullify.ai
          app-name: 'My REST API'
          header: 'Authorization: Bearer 1234'
          spec-path: 'openapi.json'
          target-host: 'api.myapp1234.dev'

name: nullify-dast-rbac
on:
  schedule:
    - cron: '0 0 * * 1'  # Run weekly on Mondays
jobs:
  nullify-dast:
    name: Nullify DAST with Role-Based Access Control Testing
    runs-on: ubuntu-20.04
    steps:
      - name: Checkout code
        uses: actions/checkout@v2
      - name: Run Nullify vulnerability scanner
        uses: nullify-platform/dast-action@main
        with:
          app-name: 'My Role-Based API'
          spec-path: 'openapi.json'
          target-host: 'api.myapp1234.dev'
          # Admin user with bearer token
          user-1-role: 'admin'
          user-1-description: 'Administrator with full system access. User belongs to the internal platform team to occasionaly perform system maintanence activities.'
          user-1-token: ${{ secrets.ADMIN_TOKEN }}
          # Regular user with basic auth
          user-2-role: 'user'
          user-2-description: 'Standard user with limited permissions.'
          user-2-username: ${{ secrets.USER_USERNAME }}
          user-2-password: ${{ secrets.USER_PASSWORD }}
          # API client with OAuth2
          user-3-role: 'api-client'
          user-3-client-id: ${{ secrets.CLIENT_ID }}
          user-3-client-secret: ${{ secrets.CLIENT_SECRET }}
          user-3-token-url: 'https://auth.myapp1234.dev/oauth/token'
          user-3-scope: 'read write'
          local: 'true'