App scan for kube stage deploy

[popenc]

Creating an issue for this as a way to keep track.

[popenc]

Scan has passed with no high or critical level vulnerabilities. Note that this has passed despite the Prisma image scans returning vulnerabilities for Tomcat.

[popenc]

Waiting for API scan, I think?

[popenc]

API scan has returned 4 high level vulnerabilities. It's possible these are false positives, but some explicit user input sanitization will be added to ensure these vulnerabilities are resolved.

2022-11-22-ZAP-Report-CTS-API.pdf

[popenc]

Second scan has passed after adding the DOM sanitization.