Merge remote-tracking branch 'origin/main' #24

	---
	name: Checks

	on: [ push ]


	jobs:
	test-lint:
	name: Test and Lint
	# ubuntu has docker compose
	runs-on: ubuntu-latest
	steps:
	- name: Login to Docker
	# to use docker compose inside the free container
	uses: docker/login-action@v1
	with:
	username: ${{ secrets.DOCKERHUB_USER }}
	password: ${{ secrets.DOCKERHUB_TOKEN }}

	- name: Checkout
	uses: actions/checkout@v2

	- name: ZAP Scan
	uses: zaproxy/[email protected]
	with:
	token: ${{ secrets.GITHUB_TOKEN }}
	docker_name: 'ghcr.io/zaproxy/zaproxy:stable'
	# my target
	target: 'http://testphp.vulnweb.com/'
	rules_file_name: '.zap/rules.tsv'
	cmd_options: '-a'

	- uses: actions/checkout@master
	- name: Run Snyk to check for vulnerabilities
	uses: snyk/actions/python-3.9@master
	env:
	SNYK_TOKEN: ${{ secrets.SNYK_ID }}
	continue-on-error: true

	- name: Test
	run: docker-compose run --rm app sh -c "python manage.py wait_for_db && python manage.py test"

	- name: Lint
	run: docker-compose run --rm app sh -c "flake8"

Provide feedback