Fix/dast scan

[tehw0lf]

Summary by CodeRabbit

• Chores
  • Updated security scanning tools to the latest versions for improved detection capabilities.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 8a29a8ce-0095-4e18-9f72-ac50eda2ceac

📥 Commits

Reviewing files that changed from the base of the PR and between 0e551aa and 366fe0c.

📒 Files selected for processing (1)

• .github/workflows/security-scan-dast.yml

---

📝 Walkthrough

Walkthrough

The security-scan-dast workflow is updated with a type correction for the fail_on_warn input default (from string "false" to boolean false) and upgraded ZAP scanning action versions for baseline and full scans.

Changes

DAST Scan Workflow Configuration

Layer / File(s)	Summary
Input default type correction .github/workflows/security-scan-dast.yml	The fail_on_warn input default changed from a quoted string to a boolean literal to correctly reflect the expected parameter type.
ZAP action version upgrades .github/workflows/security-scan-dast.yml	Baseline scan action upgraded from v0.14.0 to v0.15.0 and full scan action upgraded from v0.12.0 to v0.13.0.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

• tehw0lf/workflows#80: Also updates the same workflow file's fail_on_warn input default from string "false" to boolean false for ZAP action integration.

Poem

🐰 A workflow's fixed, its types now right,
The ZAP tools gleam with versions bright,
From false strings to booleans true,
Security scans work anew! ✨

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/dast-scan

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}