Update DAST ZAP workflow target URL and disable Azure Web Apps deployment

Author: CalinL

.github/workflows/DAST-ZAP-Zed-Attach-Proxy-Checkmarx.yml

@@ -13,8 +13,8 @@ on:
     - cron: 0 1 * * 0
 
 env:
-  ZAP_TARGET: "http://127.0.0.1:8080/" # Change this to your target URL
-  buildAndStart: "true" # Change to "true" to build and start the application if not running
+  ZAP_TARGET: "https://app-juice-shop.azurewebsites.net" # Change this to your target URL
+  buildAndStart: "false" # Change to "true" to build and start the application if not running
   imageName: "webapp01"
   tag: ${{ github.sha }}
   HOST_PORT: "8080"

.github/workflows/SCA-Anchore-Syft-SBOM.yml

@@ -35,10 +35,7 @@ jobs:
         uses: anchore/sbom-action@bb716408e75840bbb01e839347cd213767269d4a
         with:
           image: "${{ env.imageName }}:${{ env.tag }}"
-          artifact-name: sbom.spdx
           dependency-snapshot: true
 
       - name: SBOM upload 
         uses: advanced-security/[email protected]
-        with:
-          filePath: "sbom.spdx"

.github/workflows/cicd.yml

@@ -61,7 +61,9 @@ jobs:
           docker build ./src/webapp01 --file ./src/webapp01/Dockerfile -t crdevsecopscldev.azurecr.io/webapp01:${{ github.sha }}
           docker push crdevsecopscldev.azurecr.io/webapp01:${{ github.sha }}     
     
-      - uses: azure/webapps-deploy@v2
+      - name: Disabled Azure Web Apps Deploy
+        if: false  # This disables the action
+        uses: azure/webapps-deploy@v2
         with:
           app-name: ${{ env.AZURE_WEBAPP_NAME }}
           images: 'crdevsecopscldev.azurecr.io/webapp01:${{ github.sha }}'