Pull Request

Goal

Run DAST (ZAP baseline) and SAST (Semgrep) against Juice Shop v20.0.0 and analyze findings.

Changes

• submissions/lab5.md

Testing

• ZAP baseline scan completed: 10 alerts (2 Medium, 5 Low, 3 Informational)
• Semgrep scan completed: 22 findings (12 ERROR, 10 WARNING)

Artifacts & Screenshots

Checklist

• Title is clear (feat(labN): <topic>)
• No secrets/large temp files committed
• Submission file at submissions/labN.md exists
• Task 1 — ZAP baseline + auth + 10-20× ratio analysis
• Task 2 — Semgrep top-10 + triage shortcut
• Bonus — Correlation table with 1+ confirmed cross-tool finding