Adding Image Scanning and DAST to a Jenkins Pipeline Without Losing a Week to It

A practitioner’s account of wiring OWASP ZAP and Trivy into an OpenShift + Jenkins delivery pipeline — including the dead ends, because the…