From 31c61f544481a2dfb335a4a39e935f526333826f Mon Sep 17 00:00:00 2001
From: Tero Halla-aho <thallaa@gmail.com>
Date: Sat, 6 Dec 2025 18:35:35 +0200
Subject: [PATCH] Point ZAP baseline script to GHCR image

---
 scripts/zap-baseline.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/scripts/zap-baseline.sh b/scripts/zap-baseline.sh
index e9391c9..9efcdc8 100755
--- a/scripts/zap-baseline.sh
+++ b/scripts/zap-baseline.sh
@@ -5,7 +5,8 @@ set -euo pipefail
 # Usage: TARGET=https://test.lomavuokraus.fi ./scripts/zap-baseline.sh
 
 TARGET="${TARGET:-https://test.lomavuokraus.fi}"
-ZAP_IMAGE="${ZAP_IMAGE:-owasp/zap2docker-stable}"
+# Defaults to GHCR image; override with ZAP_IMAGE if needed (e.g. zaproxy/zap-stable)
+ZAP_IMAGE="${ZAP_IMAGE:-ghcr.io/zaproxy/zaproxy:stable}"
 REPORT_DIR="${REPORT_DIR:-reports/security}"
 TIMEOUT_MINUTES="${TIMEOUT_MINUTES:-5}"