https://cloufish.github.io//posts/Setting-up-zap-scan-in-cicd-pipeline/