chore(ci): removed ZAP from DEV, TEST and Added to PROD (#454)

.github/workflows/cd-to-prod-on-workflow-dispatch.yml

@@ -39,3 +39,15 @@ jobs:
       frontend-url: https://paytransparency.fin.gov.bc.ca
       semver: ${{ github.event.inputs.tag }}
       values: "values-prod.yaml"
+  zap:
+    name: ZAP Scan
+    needs: [deploys]
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Penetration Test
+        uses: zaproxy/[email protected]
+        with:
+          target: https://paytransparency.fin.gov.bc.ca
+          cmd_options: "-a"
+          fail_action: false
+          allow_issue_writing: false

.github/workflows/cd-to-test-on-workflow-dispatch.yml

@@ -57,15 +57,4 @@ jobs:
     with:
       backend-external-url: https://pay-transparency-test-backend-external.apps.silver.devops.gov.bc.ca/api
       environment: test
-  zap:
-    name: ZAP Scan
-    needs: [deploys]
-    runs-on: ubuntu-22.04
-    steps:
-      - name: Penetration Test
-        uses: zaproxy/[email protected]
-        with:
-          target: https://test.paytransparency.fin.gov.bc.ca
-          cmd_options: "-a"
-          fail_action: false
-          allow_issue_writing: false
+

.github/workflows/merge.yml

@@ -126,15 +126,4 @@ jobs:
     with:
       backend-external-url: https://pay-transparency-dev-backend-external.apps.silver.devops.gov.bc.ca/api
 
-  zap:
-    name: ZAP Scan
-    needs: [deploys]
-    runs-on: ubuntu-22.04
-    steps:
-      - name: Penetration Test
-        uses: zaproxy/[email protected]
-        with:
-          target: https://dev.paytransparency.fin.gov.bc.ca
-          cmd_options: "-a"
-          fail_action: false
-          allow_issue_writing: false
+

.github/workflows/scheduled.yml

@@ -0,0 +1,21 @@
+name: Scheduled Jobs
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 11 * * 6' # 3 AM PST = 12 PM UDT, Saturdays
+
+jobs:
+
+  zap:
+    name: ZAP Scan
+    needs: [deploys]
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Penetration Test
+        uses: zaproxy/[email protected]
+        with:
+          target: https://paytransparency.fin.gov.bc.ca
+          cmd_options: "-a"
+          fail_action: false
+          allow_issue_writing: false