clean: Add notes on DAST analysis retries and timeouts [TAROT-3317]

[afsmeira]

No description provided.

[github-actions]

Overall readability score: 53.32 (🟢 +0)

File	Readability
managing-security-and-risk.md	52.65 (🔴 -0.55)

View detailed metrics

🟢 - Shows an increase in readability
🔴 - Shows a decrease in readability

File	Readability	FRE	GF	ARI	CLI	DCRS
managing-security-and-risk.md	52.65	34.36	10.81	14.3	13.52	6.64
	🔴 -0.55	🔴 -0.2	🔴 -0.13	🔴 -0.1	🔴 -0.06	🔴 -0.02

Averages:

	Readability	FRE	GF	ARI	CLI	DCRS
Average	53.32	42.76	10.86	12.63	12.68	7.96
	🟢 +0	🟢 +0	🟢 +0	🟢 +0	🟢 +0	🟢 +0

View metric targets

Metric	Range	Ideal score
Flesch Reading Ease	100 (very easy read) to 0 (extremely difficult read)	60
Gunning Fog	6 (very easy read) to 17 (extremely difficult read)	8 or less
Auto. Read. Index	6 (very easy read) to 14 (extremely difficult read)	8 or less
Coleman Liau Index	6 (very easy read) to 17 (extremely difficult read)	8 or less
Dale-Chall Readability	4.9 (very easy read) to 9.9 (extremely difficult read)	6.9 or less

[claudiacodacy]

@afsmeira can you also add something regarding the scans we run, based on Mark's comment to give better expectations when users click scan? https://codacy.slack.com/archives/C015DHTSJUR/p1744710637674619?thread_ts=1744708722.091219&cid=C015DHTSJUR

I can propose something, give me a min

[claudiacodacy]

@afsmeira can you also add something regarding the scans we run, based on Mark's comment to give better expectations when users click scan? https://codacy.slack.com/archives/C015DHTSJUR/p1744710637674619?thread_ts=1744708722.091219&cid=C015DHTSJUR

I can propose something, give me a min

"When you start a scan, Codacy runs a baseline scan using ZAP. This is a non-intrusive scan that identifies common security issues without actively attacking your application. It’s safe to run in CI/CD pipelines and helps detect problems like missing security headers, information disclosure through HTTP response headers, insecure cookie configurations, and others."