This action stops a Nexploit scan.
NeuraLegion is a powerful dynamic application & API security testing (DAST) platform that security teams trust and developers love.
Scans any target, whether Web Apps, APIs (REST. & SOAP, GraphQL & more), Web sockets or mobile, providing actionable reports
NeuraLegion works with your existing CI/CD pipelines – trigger scans on every commit, pull request or build with unit testing.
One file. One command. One scan. No UI needed.
Interacts with applications and APIs, instead of just crawling them and guessing. Scans are fast as our AI-powered engine can understand application architecture and generate sophisticated and targeted attacks.
Stop chasing ghosts and wasting time. NeuraLegion doesn’t return false positives, so you can focus on releasing code.
NeuraLegion tests for all common vulnerabilities, such as SQL injection, CSRF, XSS, and XXE -- as well as uncommon vulnerabilities, such as business logic vulnerabilities.
More information is available on NeuraLegion’s:
Required. Your Nexploit API authorization token (key). You can generate it in the Organization section on nexploit.app. Find more information here.
Example: api_token: ${{ secrets.NEXPLOIT_TOKEN }}
Required. Scan ID to stop.
Example: scan: ${{ steps.start.outputs.id }}
start_and_stop_scan:
runs-on: ubuntu-latest
name: A job to run a Nexploit scan
steps:
- name: 🏁 Start Nexploit Scan
id: start
uses: NeuraLegion/run-scan@master
with:
api_token: ${{ secrets.NEXPLOIT_TOKEN }}
name: GitHub scan ${{ github.sha }}
discovery_types: |
[ "crawler", "archive" ]
crawler_urls: |
[ "https://juice-shop.herokuapp.com" ]
file_id: LiYknMYSdbSZbqgMaC9Sj
hosts_filter: |
[ ]
wait_for: on_high
- name: Get the output scan url
run: echo "The scan was started on ${{ steps.start.outputs.url }}"
- name: ⏳ Wait for any issues
id: wait
uses: NeuraLegion/wait-for@master
with:
api_token: ${{ secrets.NEXPLOIT_TOKEN }}
scan: ${{ steps.start.outputs.id }}
wait_for: any
timeout: 100
- name: 🛑 Stop the scan
if: ${{ always() }}
id: stop
uses: NeuraLegion/stop-scan@master
with:
api_token: ${{ secrets.NEXPLOIT_TOKEN }}
scan: ${{ steps.start.outputs.id }}