qa360 1.3.2 → 1.3.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/examples/api-basic.yml
CHANGED
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
# Simple API smoke tests for REST/GraphQL endpoints
|
|
3
3
|
|
|
4
4
|
version: 1
|
|
5
|
-
name:
|
|
5
|
+
name: api-health-check
|
|
6
6
|
|
|
7
7
|
gates:
|
|
8
8
|
- api_smoke
|
|
@@ -20,4 +20,3 @@ targets:
|
|
|
20
20
|
execution:
|
|
21
21
|
timeout: 30000 # 30 seconds
|
|
22
22
|
max_retries: 2
|
|
23
|
-
on_failure: continue # or 'stop'
|
package/examples/complete.yml
CHANGED
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
# All quality gates enabled - comprehensive quality assurance
|
|
3
3
|
|
|
4
4
|
version: 1
|
|
5
|
-
name:
|
|
5
|
+
name: complete-qa-suite
|
|
6
6
|
|
|
7
7
|
gates:
|
|
8
8
|
- api_smoke # API health checks
|
|
@@ -11,8 +11,6 @@ gates:
|
|
|
11
11
|
- perf # Performance testing
|
|
12
12
|
- sast # Static security analysis
|
|
13
13
|
- dast # Dynamic security testing
|
|
14
|
-
- secrets # Credentials scanning
|
|
15
|
-
- deps # Dependency vulnerabilities
|
|
16
14
|
|
|
17
15
|
targets:
|
|
18
16
|
api:
|
|
@@ -35,12 +33,8 @@ budgets:
|
|
|
35
33
|
|
|
36
34
|
# Security thresholds
|
|
37
35
|
security:
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
max_high: 3
|
|
41
|
-
|
|
42
|
-
dast:
|
|
43
|
-
max_high: 5
|
|
36
|
+
sast_max_high: 3 # Maximum high-severity SAST findings
|
|
37
|
+
secrets_leak: 0 # Must be zero
|
|
44
38
|
|
|
45
39
|
# Docker Compose integration (optional - remove if not using Docker)
|
|
46
40
|
# hooks:
|
|
@@ -58,4 +52,3 @@ security:
|
|
|
58
52
|
execution:
|
|
59
53
|
timeout: 120000 # 2 minutes
|
|
60
54
|
max_retries: 2
|
|
61
|
-
on_failure: continue
|
package/examples/fullstack.yml
CHANGED
package/examples/security.yml
CHANGED
|
@@ -1,14 +1,12 @@
|
|
|
1
1
|
# QA360 Example: Security Suite
|
|
2
|
-
# Comprehensive security testing (SAST, DAST
|
|
2
|
+
# Comprehensive security testing (SAST, DAST)
|
|
3
3
|
|
|
4
4
|
version: 1
|
|
5
|
-
name:
|
|
5
|
+
name: security-test-suite
|
|
6
6
|
|
|
7
7
|
gates:
|
|
8
8
|
- sast # Static Application Security Testing
|
|
9
9
|
- dast # Dynamic Application Security Testing
|
|
10
|
-
- secrets # Secrets detection
|
|
11
|
-
- deps # Dependency vulnerability scanning
|
|
12
10
|
|
|
13
11
|
targets:
|
|
14
12
|
api:
|
|
@@ -19,14 +17,10 @@ targets:
|
|
|
19
17
|
|
|
20
18
|
# Security thresholds
|
|
21
19
|
security:
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
max_high: 3 # Maximum 3 high-severity issues
|
|
25
|
-
|
|
26
|
-
dast:
|
|
27
|
-
max_high: 5 # Maximum 5 high-severity runtime issues
|
|
20
|
+
sast_max_high: 3 # Maximum high-severity SAST findings
|
|
21
|
+
secrets_leak: 0 # Must be zero
|
|
28
22
|
|
|
29
23
|
# Execution settings
|
|
30
24
|
execution:
|
|
31
25
|
timeout: 120000 # Security scans can take longer
|
|
32
|
-
|
|
26
|
+
max_retries: 1
|
package/examples/ui-basic.yml
CHANGED