update #91


	name: OWASP Zap Scan and Report
	on:
	push:
	branches: [ zap-integration ]
	schedule:
	- cron: '0 4 * * *' # run every day at midnight
	permissions:
	id-token: write
	jobs:
	Zap_nightly_run:
	name: Zap Nightly Run (for nightly cron with JIRA)
	runs-on: ubuntu-latest
	if: github.event_name == 'push'

	steps:
	- name: Checkout
	uses: actions/checkout@v2
	# - name: install requests
	# run: pip install requests

	# - name: OWASP ZAP Baseline Scan
	# continue-on-error: true
	# uses: zaproxy/action-full-scan@v0.5.1
	# with:
	# target: "https://dhlhkf03xxt44.cloudfront.net"
	# cmd_options: -U "internaluser@test.com" -n /zap/wrk/eval-context.json
	- name: Cat output
	run: \|
	echo ${{ secrets.AWS_OIDC_ROLE_TO_ASSUME }}


	# - name: Parse Zap output and create Jira tickets
	# uses: Enterprise-CMCS/macfc-security-scan-report@v1.0.3
	# with:
	# jira-username: ${{ secrets.JIRA_SERVICE_USERNAME }}
	# jira-token: ${{ secrets.JIRA_SERVICE_USER_TOKEN }}
	# jira-host: 'qmacbis.atlassian.net'
	# jira-project-key: 'MDCT'
	# jira-issue-type: 'Task'
	# jira-custom-field-key-value: '{ "customfield_10007" : "MDCT-2280", "customfield_14154" : [{"id": "16958", "value": "MCR"}] }'
	# jira-labels: 'MCR,zap'
	# jira-title-prefix: '[MCR] - Zap :'
	# zap-risk-code: '2'
	# scan-output-path: 'report_json.json'
	# scan-type: 'zap'

Provide feedback