Merge pull request 'owasp zap config v16' (#21) from teste-bloqueio into main

Reviewed-on: #21

.gitea/workflows/deploy.yml

@@ -46,6 +46,7 @@ jobs:
             -Dsonar.javascript.lcov.reportPaths=coverage/lcov.info
 
       - name: 5. Dynamic Security Scan (OWASP ZAP)
+        # REMOVIDO o "if: github.event_name == 'push'". Agora o ZAP corre SEMPRE (nos PRs e nos Merges)!
         run: |
           echo ">>> 1. Limpeza profunda do ambiente..."
           docker rm -f apex-sandbox zap-scanner || true
@@ -95,32 +96,17 @@ jobs:
             exit 0
           fi
 
-      - name: 6. Deploy em Produção (SSH)
+      - name: 6. Production Deployment
+        # MANTIDO: O deploy para a Produção SÓ pode acontecer num push/merge direto para a main!
         if: github.event_name == 'push'
-        uses: appleboy/ssh-action@master
-        with:
-          host: ${{ secrets.SSH_HOST }}
-          username: ${{ secrets.SSH_USER }}
-          key: ${{ secrets.SSH_PRIVATE_KEY }}
-          script: |
-            set -e 
-            
-            echo ">>> 1. A navegar para a pasta do projeto no servidor..."
-            cd /storage/docker/website-secure
-            
-            echo ">>> 2. A transferir o código aprovado (git pull)..."
-            git pull origin main
-            
-            echo ">>> 3. A compilar a imagem Docker de Produção..."
-            docker build -f backend/Dockerfile -t apex-solutions:prod .
-            
-            echo ">>> 4. A substituir o contentor em execução..."
+        run: |
           docker rm -f portal-corporativo || true
-            docker run -d -p 3000:3000 --name portal-corporativo --restart unless-stopped apex-solutions:prod
-            
-            echo "✅ Deploy concluído com sucesso! A aplicação está no ar."
+          docker run -d -p 3000:3000 --name portal-corporativo apex-solutions:latest
+          sleep 5
+          docker cp qatests/report.html portal-corporativo:/usr/src/app/frontend/zap-report.html || true
 
       - name: 7. Archive ZAP Report
+        # ALTERADO: Usamos apenas always(). Queremos ver o relatório independentemente de ser PR ou Push.
         if: always()
         uses: actions/upload-artifact@v3
         with:

frontend/index.html

@@ -3,7 +3,7 @@
 <head>
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <title>Home | Apex Solutions</title>
+    <title>Home | Apex Solutions branch sec</title>
     <script src="https://cdn.tailwindcss.com"></script>
     <style>
         html { scroll-behavior: smooth; } /* Animação suave ao clicar no link de serviços */
@@ -33,7 +33,7 @@
             <div class="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8 py-24 lg:py-32">
                 <h1 class="text-4xl tracking-tight font-extrabold text-gray-900 sm:text-5xl md:text-6xl">
                     <span class="block">Innovative Solutions for</span>
-                    <span class="block text-blue-600">Modern website-secure</span>
+                    <span class="block text-blue-600">Modern Businesses</span>
                 </h1>
                 <p class="mt-6 max-w-2xl text-lg text-gray-500 leading-relaxed">
                     At Apex Solutions, we deliver high-quality business consulting, technology services, and strategic insights. We help organizations across the globe achieve their goals through operational excellence and digital transformation.