.gitea/workflows/deploy.yml

@@ -48,31 +48,25 @@ jobs:
       - name: 5. Dynamic Security Scan (OWASP ZAP)
         if: github.event_name == 'push'
         run: |
-          echo ">>> Limpando ambiente anterior (Contentores e Rede)..."
           docker rm -f apex-sandbox zap-scanner || true
           docker network rm zap-net || true
-          
-          echo ">>> Criando rede isolada..."
           docker network create zap-net
           
-          echo ">>> Iniciando sandbox..."
           docker run -d --name apex-sandbox --network zap-net apex-solutions:latest
           sleep 10
           
-          echo ">>> Iniciando OWASP ZAP Baseline Scan..."
           mkdir -p qatests
           
+          # Mapeamos o diretório atual do runner para /zap/wrk/
           docker run --user root --name zap-scanner \
             --network zap-net \
-            -v ${{ github.workspace }}:/zap/wrk/:rw \
+            -v "$(pwd):/zap/wrk/:rw" \
             -t ghcr.io/zaproxy/zaproxy:stable zap-baseline.py \
             -t http://apex-sandbox:3000 \
             -r report.html \
             -I -c zap-baseline.conf
           
           docker cp zap-scanner:/zap/wrk/report.html qatests/report.html || true
-          
-          echo ">>> Limpeza final..."
           docker rm -f zap-scanner apex-sandbox || true
           docker network rm zap-net || true