feat(lab5): ZAP baseline + auth + Semgrep + correlation

[semyonnadutkin]

Goal

Perform DAST with ZAP and SAST with Semgrep against the Juice Shop application.

Changes

• Added submissions/lab5.md

Testing

Verified that all expected reports were generated successfully and are non-empty.

Commands executed:

ls -l labs/lab5/results/

Observed output:

total 432
-rw-r--r-- 1 semyon semyon  93904 Jun 20 00:22 auth-report.html
-rw-r--r-- 1 semyon semyon  36567 Jun 20 00:22 auth-report.json
-rw-r--r-- 1 semyon semyon  85501 Jun 20 00:14 baseline-report.html
-rw-r--r-- 1 semyon semyon  30980 Jun 20 00:14 baseline-report.json
-rw-r--r-- 1 semyon semyon 168714 Jun 20 13:46 semgrep.json
-rw-r--r-- 1 semyon semyon  13484 Jun 20 13:41 semgrep.txt
-rw-r--r-- 1 semyon semyon    867 Jun 20 00:13 zap.yaml

Artifacts & Screenshots

Artifacts

• submissions/lab5.md

Screenshots

See Figure 1 for the auto-generated ZAP report.

Figure 1: ZAP report

Checklist

• Title is clear (feat(labN): <topic> style)
• No secrets/large temp files committed
• Submission file at submissions/labN.md exists

• Task 1 — ZAP baseline + auth + 10-20× ratio analysis
• Task 2 — Semgrep top-10 + triage shortcut
• Bonus — Correlation table with 1+ confirmed cross-tool finding