Build attack scenarios

[dstrebel]

Use multiple different attack scenario and show how to alert on those events

[RafaPazos]

What about adding ZAP to the pipeline to do a spider and a quick scan? This would create several attacks. Not very complex ones but the most common are there. I have done this with AzDO, the integration of ZAP with GitHub Actions should be easier. DO you think this is OK?