Chore #714 : Optimze Github Actions #1255

	name: DAST with ZAP

	on:
	pull_request:
	branches: [master]
	workflow_dispatch:

	permissions:
	contents: read

	jobs:
	test-dast:
	name: DAST test with ZAP
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@v4
	- name: Set up JDK 21
	uses: actions/setup-java@v3
	with:
	java-version: "21"
	distribution: "corretto"
	- name: Clean install
	run: ./mvnw --no-transfer-progress clean install -DskipTests -Ddependency-check.skip -Dcyclonedx.skip=true -Dexec.skip
	- name: Cache JAR file
	id: cache-jar
	uses: actions/cache@v3
	with:
	path: target/wrongsecrets-1.7.0-SNAPSHOT.jar
	key: JarCache-${{ runner.os }}-${{ hashFiles('**/pom.xml') }}
	restore-keys: \|
	JarCache-${{ runner.os }}-
	- name: test
	run: ls
	- name: Start wrongsecrets
	run: nohup ./mvnw spring-boot:run -Dspring-boot.run.profiles=without-vault &
	- name: ZAP Scan
	uses: zaproxy/[email protected]
	env:
	ZAP_AUTH_HEADER_VALUE: "Basic QWxhZGRpbjpvcGVuIHNlc2FtZQ=="
	ZAP_AUTH_HEADER: "Authorization"
	with:
	allow_issue_writing: false
	docker_name: "owasp/zap2docker-stable"
	target: "http://localhost:8080"
	rules_file_name: config/zap/rule-config.tsv
	fail_action: true
	cmd_options: '-z "-configFile /zap/wrk/config/zap/options.prop"'

Provide feedback