feat(#684): add DAST with ZAP

[bendehaan]

What kind of changes does this PR include?

• Fixes or refactors
• A new challenge
• Additional documentation
• Something else

Description

This PR adds a workflow to run the baseline scan against WrongSecrets running on Kubernetes. It will open and update a GitHub issue with potential problems.

Relations

Closes #684

References

Implemented the action according to OWASP ZAP baseline scan action documentation

Checklist:

• All the contributions made are solely the work of me and my co-authors
• I tested the changes in this PR (if applicable)
• I added unit tests to ensure my change works (when change in Java or on front-end code)
• The PR passes pre-commit hooks and automated tests

[commjoen]

Thanks! Lgtm! Can you please file an issue for the remaining findings :-)?

[bendehaan]

Thanks! Lgtm! Can you please file an issue for the remaining findings :-)?

Will do!

[bendehaan]

Opened #709