feat: dast-sarif configuration (#2)

Author: nterbogt

.github/workflows/deploy_dev.yml

@@ -40,3 +40,17 @@ jobs:
 
       - name: 🧹 Post-deploy
         run: skpr exec dev "drush updb -y"
+
+  dast:
+    runs-on: ubuntu-latest
+    needs: deploy
+    steps:
+      - name: ⬇️ Checkout Code
+        uses: actions/checkout@v6
+
+      - name: ZAP Scan
+        uses: zaproxy/action-baseline@v0.15.0
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          allow_issue_writing: false
+          target: https://dev.drupal.qa.skpr.dev/

.gitignore

@@ -8,6 +8,7 @@ vendor/
 .gitattributes
 .idea/
 .php/
+.env
 
 !app/sites/default/settings.php
 !app/sites/default/services.yml