Squashed signed commit for PR 499: new active script to detect open mcp servers

Signed-off-by: Daniel Santos <vovohelo@gmail.com>

Author: Daniel Santos

.github/workflows/codeql.yml

@@ -28,10 +28,10 @@ jobs:
         with:
           distribution: 'temurin'
           java-version: 17
-      - uses: github/codeql-action/init@v3
+      - uses: github/codeql-action/init@v4
         with:
           languages: ${{ matrix.language }}
-      - uses: github/codeql-action/autobuild@v3
-      - uses: github/codeql-action/analyze@v3
+      - uses: github/codeql-action/autobuild@v4
+      - uses: github/codeql-action/analyze@v4
         with:
           category: "/language:${{matrix.language}}"

CHANGELOG.md

@@ -9,17 +9,22 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - Variant script 'AddUrlParams.js'
 - Extender script 'ScanMonitor.js'
 - Active script 'SwaggerSecretDetector.js'
+- Active script 'OpenModelContextProtocolServer.js' - Attempts to detect Model Context Protocol (MCP) servers lacking authentication.
 
 ### Changed
 - Update minimum ZAP version to 2.16.0 and compile with Java 17.
 - Add cautionary note to help and readme.
 - Maintenance and documentation changes.
+- Active and passive READMEs to include lastest JS script examples.
 
 ### Fixed 
 - The following scripts were not being loaded as scan rules:
   - active/SSTI.js
   - passive/Mutliple Security Header Check.js
 
+### Removed
+- Links to videos which no longer exist.
+
 ## [19] - 2024-07-01
 ### Added
 - extender/arpSyndicateSubdomainDiscovery.js - uses the API of [ARPSyndicate's Subdomain Center](https://www.subdomain.center/)

README.md

@@ -38,7 +38,4 @@ in the main directory of the project, the add-on will be placed in the directory
 
 ## Official Videos
 
-* [ZAP In Ten: Introduction to Scripting](https://play.sonatype.com/watch/7gR4qYzUZ686wEDMBfxGdf) (9:33)
 * [ZAP Deep Dive: Scripting ZAP](https://www.youtube.com/watch?v=ujL6rH6nVXI) (28:34)
-
-Note that there are videos for some of the specific script types linked from the relevant READMEs.