Feature/lab9

[KsAKarpeeva73]

Goal

Finish Lab 9 by performing DevSecOps security scans with OWASP ZAP and Trivy, then documenting the findings.

Changes

• Added labs/submission9.md with DevSecOps scan results and analysis
• Ran OWASP ZAP baseline scan against OWASP Juice Shop
• Documented Medium risk web vulnerabilities and security headers status
• Ran Trivy scan for the bkimminich/juice-shop container image
• Documented HIGH and CRITICAL container vulnerabilities
• Added screenshots of ZAP report and Trivy findings
• Included analysis and CI/CD integration reflection

Testing

• OWASP Juice Shop was deployed and verified locally
• OWASP ZAP baseline scan completed successfully
• ZAP HTML report was generated and analyzed
• Trivy container image scan completed successfully
• HIGH and CRITICAL vulnerabilities were documented
• Screenshots are included as evidence
• Documentation is complete and updated

Lab Checklist

• Task 1 — Web Application Scanning with OWASP ZAP
• Task 2 — Container Vulnerability Scanning with Trivy