From 47db928d3c129f9327bb03cf414133dd2e62d51f Mon Sep 17 00:00:00 2001
From: pm <pedro.maio@each-cs.com>
Date: Sat, 13 Jun 2026 00:40:00 +0100
Subject: [PATCH] owasp zap config v2

---
 .gitea/workflows/deploy.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index fb49270..44b8e71 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -64,15 +64,15 @@ jobs:
           
           echo ">>> Provisioning ephemeral sandbox environment..."
           docker run -d --name apex-sandbox --network zap-net apex-solutions:latest
-          sleep 10 # Aumentei para 10s para garantir que o Node arranca bem
+          sleep 10
           
           echo ">>> Initiating OWASP ZAP Baseline Scan..."
           mkdir -p qatests
           
-          # O ZAP precisa de aceder ao contentor pela rede criada
+          # O truque aqui é mapear a pasta atual (.) para /zap/wrk/
           docker run --user root --name zap-scanner \
             --network zap-net \
-            -v zap-reports:/zap/wrk/:rw \
+            -v ${{ github.workspace }}:/zap/wrk/:rw \
             -t ghcr.io/zaproxy/zaproxy:stable zap-baseline.py \
             -t http://apex-sandbox:3000 \
             -r report.html \