chore: add FOSSA and OpenSSF badges (#25) #22

	name: ZAP Scan
	on:
	push:
	branches:
	- main
	permissions:
	issues: write
	jobs:
	zap_scan:
	runs-on: ubuntu-latest
	name: Scan the webapplication
	steps:
	- uses: actions/checkout@v4
	- uses: extractions/setup-just@v2
	# This step builds the image and runs the web application in the background for the ZAP scan
	- name: Run image
	run: just run-ci
	- name: ZAP Scan
	uses: zaproxy/action-api-scan@v0.7.0
	with:
	token: ${{ secrets.GITHUB_TOKEN }}
	format: openapi
	target: 'http://localhost:5000/openapi.json'
	# The '-a' option activates all active scanners. Use this for comprehensive scanning.
	cmd_options: '-a'

Provide feedback