Merge pull request 'owasp zap config v2' (#9) from teste-bloqueio into main

Reviewed-on: #9

.gitea/workflows/deploy.yml

@@ -64,15 +64,15 @@ jobs:
           
           echo ">>> Provisioning ephemeral sandbox environment..."
           docker run -d --name apex-sandbox --network zap-net apex-solutions:latest
-          sleep 10 # Aumentei para 10s para garantir que o Node arranca bem
+          sleep 10
           
           echo ">>> Initiating OWASP ZAP Baseline Scan..."
           mkdir -p qatests
           
-          # O ZAP precisa de aceder ao contentor pela rede criada
+          # O truque aqui é mapear a pasta atual (.) para /zap/wrk/
           docker run --user root --name zap-scanner \
             --network zap-net \
-            -v zap-reports:/zap/wrk/:rw \
+            -v ${{ github.workspace }}:/zap/wrk/:rw \
             -t ghcr.io/zaproxy/zaproxy:stable zap-baseline.py \
             -t http://apex-sandbox:3000 \
             -r report.html \