feat(vuln-scanner): add ZAP + Nuclei DAST scanning of MIT Learn QA - #5632

Open

shaidar wants to merge 9 commits into

mainfrom

feat/vuln-scanner-dast

Commits on Aug 28, 2026

feat(vuln-scanner): add ZAP + Nuclei DAST scanning of MIT Learn QA

shaidar
and
claude
committed
b9d1756
fix(vuln-scanner): use a genuinely hardened multi-stage image for the reporter

shaidar
and
claude
committed
d9ef386
fix(vuln-scanner): pin ZAP/Nuclei digests, fix a fabricated Nuclei flag

shaidar
and
claude
committed
469b5f3
feat(vuln-scanner): register the Concourse image-build + deploy pipeline

shaidar
and
claude
committed
658953d
chore(vuln-scanner): initialize the real QA stack

shaidar
and
claude
committed
b554aeb
fix(vuln-scanner): address Copilot PR review feedback

shaidar
and
claude
committed
5130495
fix(vuln-scanner): use a real ZAP report template name

shaidar
and
claude
committed
45f8a15
fix(vuln-scanner): archive via BatchImportFindings, not BatchUpdateFindings

shaidar
and
claude
committed
e7360e5
fix(vuln-scanner): stop credential leak to init containers, fix Nuclei false-clean archival

shaidar
and
claude
committed
f426c1f