Configure Actions to not alert based on alert level

[Trevor Richards]

Is there some intuitive way to have zaproxy/action-f...@v0.13.0 do a non-zero exit code only if the alert level is above a specific threshold? For example, I only want the github action to fail if I have alerts of a HIGH level or above.

I've tried cmd_options: -l FAIL but that hasn't helped me out.

Thanks

[Simon Bennetts]

Change to use the Automation Framework Scan Action: https://github.com/marketplace/actions/zap-automation-framework-scan

That is _much_ more flexible, and supports a job which gives you fine grained control of the exit value: https://www.zaproxy.org/docs/desktop/addons/automation-framework/job-exitstatus/

Cheers,

Simon