Zap to ocsf with orchestration

[northdpole]

Todo: make this into a single workflow

how to test:

create a docker network so we can reach one container from the other

docker network create zap-demo 

run the example vulnerable application container:

 docker run --network zap-demo --name bodgeit.com captainfoobar/bodgeit 

build the zap container with the orchestration script

 docker build -t zap-with-orchestration ./new-components/scanner/zaproxy/zap-with-orchestration-script 

run zap in attack mode

docker run -v `pwd`:/scratch -ti --network zap-demo zap-with-orchestration:latest

wait for ~10' and you will see a file named zap-report.json in the local directory