Dastardly Scan Action

Because Dastardly fails the build when vulnerabilities are found, you may want to use continue-on-error: true to ensure subsequent steps (like report publishing) still execute.

To view the scan results in the GitHub UI, pair this action with a JUnit XML parser (such as mikepenz/action-junit-report@v3). Use if: always() on the parser step to ensure it runs even if the Dastardly scan fails due to detected vulnerabilities.

steps:
  - name: Run Dastardly Action Step
    continue-on-error: true                        # This allows subsequent steps to run even if this step fails
    uses: PortSwigger/dastardly-github-action@main
    with:
      target-url: 'https://ginandjuice.shop'

  # You can replace this next step with any JUnit XML parser of your choosing
  - name: Publish Test Report
    if: always()                                    # Forces this step to always run
    uses: mikepenz/action-junit-report@v3
    with:
      report_paths: '**/dastardly-report.xml'       # Update this path if you provide a custom output-filename
      require_tests: true