Fix DAST scan reports openly

borisrizov-zf commented 7 months ago

Description

The DAST scan reports security issues openly at the moment. This should be minimized by removing the report step and furthermore adding a minimal retention time for the report files. This way the report files can be downloaded after a scan and examined. Third parties would have only a limited window to examine these, given they know when a scan is run, thus minimizing the risk of accidental security issue leaks.

Pre-review checks

Please ensure to do as many of the following checks as possible, before asking for committer review:

[x] DEPENDENCIES are up-to-date. Dash license tool. Committers can open IP issues for restricted libs.
[x] Copyright and license header are present on all affected files