From 0c95706cc9fbbb064b498e8d6b49ccec617a4fa8 Mon Sep 17 00:00:00 2001
From: Tero Halla-aho <thallaa@gmail.com>
Date: Fri, 12 Dec 2025 09:37:40 +0200
Subject: [PATCH] Fix ZAP baseline to run in writable workdir

---
 scripts/zap-baseline.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/scripts/zap-baseline.sh b/scripts/zap-baseline.sh
index 9efcdc8..e55083a 100755
--- a/scripts/zap-baseline.sh
+++ b/scripts/zap-baseline.sh
@@ -16,6 +16,8 @@ echo "Running ZAP baseline against $TARGET (timeout ${TIMEOUT_MINUTES}m)..."
 docker run --rm \
   -u "$(id -u)":"$(id -g)" \
   -v "$PWD/$REPORT_DIR":/zap/wrk \
+  -w /zap/wrk \
+  -e HOME=/zap/wrk \
   "$ZAP_IMAGE" zap-baseline.py \
   -t "$TARGET" \
   -x zap-report.xml \