Enable `mayhem-url` Mayhem API override

v1.10.0

Mayhem URL defaults to app.mayhem.security if not provided

Update action node from 16 to 20

v1.9.1

Upgrade Node20 to Node16 (will be removed spring 2024)

migration to app.mayhem.security

Migation to the new https://app.mayhem.security/ frontend

Backend interaction bug fix

v1.8.1

Enable setting MAPI_URL (#509)

Mayhem for API Action v1.8.0

Import or run ZAP - API Scan as part of your Mayhem for API scan wit the new zap-api-scan flag.

Mayhem for API Action v1.7.0

auto run duration support to mapi run. mapi will automatically determine how long to fuzz a target. It is still possible to specify a time-based duration.

Job report posted as in pull request comment thread

When Mayhem for API is run against a pull request, a report will no be added to the pull request comment thread.

Automatic authentication with github without explicit mapi-token

In the absence of at MAPI_TOKEN secret users will be automatically authenticated within the MAPI system by querying github.

Mayhem for API Action v1.4.0

• Allow override of API target with target input variable

Full Changelog: v1.3.0...v1.4.0

Mayhem for API Action v1.3.0

What's Changed

• Allow for additional 'mapi run' arguments using the run-args input variable in #257

Full Changelog: v1...v1.3.0