Skip to content

Conversation

@theinfosecguy
Copy link
Owner

  • Run unit tests and integration tests on pull_request event
  • Install required Go tools and gf patterns in CI

- Switch from --quiet to --verbose to capture error output in CI
- Add --timeout 5 to dalfox args for faster CI runs
- Include output in assertion message for debugging CI failures
The headless CI environment doesn't have Chrome installed properly,
causing chromedp to panic with 'close of closed channel' error.

Skip DOM mining with --skip-mining-dom to avoid this issue while
still running the core XSS scan functionality.
--skip-mining-dom wasn't enough; dalfox still uses chromedp for DOM
XSS and inJS verification. Use --skip-headless to completely disable
headless browser-based scanning that causes the panic.
@theinfosecguy theinfosecguy merged commit 9a93a6a into main Jan 26, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants