OWASP OWASP#714 : Fixing workflow triggering isues

Author: puneeth072003

.github/workflows/dast-zap-test.yml

@@ -17,22 +17,21 @@ jobs:
         uses: actions/checkout@v4
       - name: Trigger Building JAR cache
         if: steps.cache.outputs.cache-hit != 'true'
-        uses: actions/github-script@v4
-        with:
-          script: |
-            const { data: workflows } = await octokit.actions.listRepoWorkflows({
-                owner: context.repo.owner,
-                repo: context.repo.repo
-              });
-              const secondWorkflow = workflows.workflows.find(w => w.name === "building-jar-cache.yml");
-              if (secondWorkflow) {
-                await octokit.actions.createWorkflowDispatch({
-                  owner: context.repo.owner,
-                  repo: context.repo.repo,
-                  workflow_id: secondWorkflow.id
-                });
-              }
-            token: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          const { Octokit } = require("@octokit/core");
+          const octokit = new Octokit({ auth: process.env.GITHUB_TOKEN });
+          const { data: workflows } = await octokit.request("GET /repos/commjoen/wrongsecrets/actions/workflows", {
+            owner: process.env.GITHUB_REPOSITORY.split("/")[0],
+            repo: process.env.GITHUB_REPOSITORY.split("/")[1]
+          });
+          const secondWorkflow = workflows.workflows.find(w => w.name === "building-jar-cache.yml");
+          if (secondWorkflow) {
+            await octokit.request("POST /repos/commjoen/wrongsecrets/actions/workflows/Building JAR cache/dispatches", {
+              owner: process.env.GITHUB_REPOSITORY.split("/")[0],
+              repo: process.env.GITHUB_REPOSITORY.split("/")[1],
+              workflow_id: secondWorkflow.id
+            });
+          }
       - name: Start wrongsecrets
         run: nohup ./mvnw spring-boot:run -Dspring-boot.run.profiles=without-vault &
       - name: ZAP Scan