Merge branch 'peggy/zap-scan' into develop

.github/workflows/zap-scans.yml

@@ -0,0 +1,41 @@
+name: ZAP Scans
+
+on:
+  schedule:
+    - cron: "3 0 * * Mon"
+  workflow_dispatch:
+
+# A workflow run is made up of one or more jobs that can run sequentially or in parallel
+jobs:
+  screening-portal-ui-zap-scan:
+    runs-on: ubuntu-latest
+    steps:
+      - name: UI
+        uses: zaproxy/action-full-scan@v0.11.0
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          target: "https://dev-spd.apps.emerald.devops.gov.bc.ca/screening/"
+          artifact_name: "screening_portal_ui_zap_scan"
+          issue_title: "screening_portal_ui_zap_scan"
+
+  # screening-portal-api-zap-scan:
+  #     runs-on: ubuntu-latest
+  #     steps:
+  #     - name: API
+  #       uses: zaproxy/action-api-scan@v0.8.0
+  #       with:
+  #         token: ${{ secrets.GITHUB_TOKEN }}
+  #         target: 'https://dev-ecer-registry-portal.apps.silver.devops.gov.bc.ca/swagger/v1/swagger.json'
+  #         artifact_name: 'registry_portal_api_zap_scan'
+  #         issue_title: 'registry_portal_api_zap_scan'
+
+  dynamics-helper-api-zap-scan:
+    runs-on: ubuntu-latest
+    steps:
+      - name: API
+        uses: zaproxy/action-api-scan@v0.8.0
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          target: "https://dev-spd-dynamics-helper.apps.emerald.devops.gov.bc.ca/swagger/v1/swagger.json"
+          artifact_name: "dh_api_zap_scan"
+          issue_title: "dh_api_zap_scan"