Codigo vulnerabilidad reparada

.github/workflows/dast-test.yaml

@@ -27,3 +27,19 @@ jobs:
 
       - name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@v3
+  dast:
+    name: ZAP - DAST Test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        name: Checkout code
+
+      - name: run api
+        run: |
+          npm install
+          npm run dev&
+
+      - name: ZAP Scan
+        uses: zaproxy/action-api-scan@v0.7.0
+        with:
+          target: 'http://localhost:3000/search?q=123'

.github/workflows/zap-dast-test.yaml

@@ -0,0 +1,27 @@
+name: deploy
+
+on:
+  push:
+    branches: ["main--p"]
+
+env:
+  REGISTRY: nogueranv
+  IMAGE_NAME: rest_api
+
+jobs:
+  build:
+    name: ZAP - DAST Test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        name: Checkout code
+
+      - name: run api
+        run: |
+          npm install
+          npm run dev&
+
+      - name: ZAP Scan
+        uses: zaproxy/action-api-scan@v0.7.0
+        with:
+          target: 'http://localhost:3000/search?q=123'