This action stops a Bright scan.

Bright is a powerful dynamic application & API security testing (DAST) platform that security teams trust and developers love.

Scans any target, whether Web Apps, APIs (REST. & SOAP, GraphQL & more), Web sockets or mobile, providing actionable reports

Bright works with your existing CI/CD pipelines – trigger scans on every commit, pull request or build with unit testing.

One file. One command. One scan. No UI needed.

Interacts with applications and APIs, instead of just crawling them and guessing. Scans are fast as our AI-powered engine can understand application architecture and generate sophisticated and targeted attacks.

Stop chasing ghosts and wasting time. Bright doesn’t return false positives, so you can focus on releasing code.

Bright tests for all common vulnerabilities, such as SQL injection, CSRF, XSS, and XXE -- as well as uncommon vulnerabilities, such as business logic vulnerabilities.

More information is available on Bright’s:

• Website
• Knowledge base
• YouTube channel
• GitHub Actions

Required. Your Bright API authorization token (key). You can generate it in the Organization section in the Bright app. Find more information here.

Example: api_token: ${{ secrets.BRIGHTSEC_TOKEN }}

Required. Scan ID to stop.

Example: scan: ${{ steps.start.outputs.id }}

start_and_stop_scan:
  runs-on: ubuntu-latest
  name: A job to run a Bright scan
  steps:
  - name: 🏁 Start Bright Scan
    id: start
    uses: NeuraLegion/[email protected]
    with:
      api_token: ${{ secrets.BRIGHTSEC_TOKEN }}
      name: GitHub scan ${{ github.sha }}
      discovery_types: |
        [ "crawler", "archive" ]
      crawler_urls: |
        [ "https://juice-shop.herokuapp.com" ]
      file_id: LiYknMYSdbSZbqgMaC9Sj
      hosts_filter: |
        [ ]
      wait_for: on_high
  - name: Get the output scan url
    run: echo "The scan was started on ${{ steps.start.outputs.url }}"
  - name: ⏳ Wait for any issues
    id: wait
    uses: NeuraLegion/[email protected]
    with:
      api_token: ${{ secrets.BRIGHTEC_TOKEN }}
      scan: ${{ steps.start.outputs.id }}
      wait_for: any
      timeout: 100
  - name: 🛑 Stop the scan
    if: ${{ always() }}
    id: stop
    uses: NeuraLegion/[email protected]
    with:
      api_token: ${{ secrets.BRIGHTSEC_TOKEN }}
      scan: ${{ steps.start.outputs.id }}