References:

https://spaces.redhat.com/spaces/PRODSEC/pages/330175896/DAST+workflow

https://spaces.redhat.com/spaces/PRODSEC/pages/330181237/RapiDAST+QuickStart+Guide#RapiDASTQuickStartGuide-Case3:ScanningOpenShift/KubernetesandOperators

https://spaces.redhat.com/spaces/PRODSEC/pages/330181237/RapiDAST+QuickStart+Guide#RapiDASTQuickStartGuide-Case3:ScanningOpenShift/KubernetesandOperators

https://docs.google.com/document/d/1mcBiSnmackxl3DnoT2zo8XhwWl02lX6Qu1pcYNpO7l0/edit?tab=t.0#heading=h.318ozc4r2sr7

https://konflux.pages.redhat.com/docs/users/testing/integration/third-parties/rapidast.html

https://gitlab.cee.redhat.com/openshift-power-monitoring/powermon-konflux/-/merge_requests/347

Acceptance Criterias:

• Understand the DAST process and RapiDAST tool (oobtkube scanner)
• Create scanning automation script that can be executed on demand

Future work (create followup ticket):

• Integrate with Konflux CI that can be run along with release pipeline
• Work with Konflux team to add a common reusable DAST pipeline that can benefit all operator team (high impact)