Merge pull request #772 from bcgov/yj

chore: added zap scan

Author: ychung-mot

.github/workflows/deploy-test.yml

@@ -132,4 +132,24 @@ jobs:
           git add .
 
           git commit -m "Update image tag to ${vtag//v} on $datetime"
-          git push origin test
+          git push origin test
+
+  zap-scan:
+    needs: [deploy-emerald]
+    runs-on: ubuntu-22.04
+    timeout-minutes: 10
+    permissions:
+      contents: read
+      issues: write
+
+    steps:
+    - uses: hmarr/debug-action@a701ed95a46e6f2fb0df25e1a558c16356fae35a
+    - uses: actions/checkout@96f53100ba2a5449eb71d2e6604bbcd94b9449b5
+      with:
+        ref: main
+    - name: ZAP Scan
+      uses: zaproxy/action-full-scan@c8994d4f913cf872ec9964ac2d998c9bec369060
+      with:
+        token: ${{ secrets.GITHUB_TOKEN }}
+        target: https://dev.strdata.gov.bc.ca/
+        rules_file_name: '.zap/rules.tsv'