automation: Do not warn if "enabled" or "alwaysRun" properties specified

[psiinon]

Simple plan with all jobs disabled

env:
contexts:

• name: Default Context
  urls:
  • https://www.zaproxy.org
    authentication:
    verification:
    method: response
    pollFrequency: 60
    pollUnits: requests
    sessionManagement:
    method: cookie
    technology: {}
    structure: {}
    parameters: {}
    jobs:
• type: activeScan-config
  parameters: {}
  inputVectors:
  scripts: true
  enabled: false
  alwaysRun: true
• type: activeScan-policy
  parameters: {}
  policyDefinition:
  defaultStrength: MEDIUM
  enabled: false
  alwaysRun: true
• type: alertFilter
  parameters: {}
  enabled: false
  alwaysRun: true
• type: passiveScan-config
  parameters: {}
  enabled: false
  alwaysRun: true
• type: replacer
  parameters: {}
  enabled: false
  alwaysRun: true
• type: script
  parameters:
  name: hi
  type: active
  action: add
  engine: "ECMAScript : Graal.js"
  inline: print('hi');
  enabled: false
  alwaysRun: true
• type: requestor
  parameters: {}
  enabled: false
  alwaysRun: true
• type: graphql
  parameters: {}
  enabled: false
  alwaysRun: true
• type: import
  parameters: {}
  enabled: false
  alwaysRun: true
• type: openapi
  parameters: {}
  enabled: false
  alwaysRun: true
• type: postman
  parameters: {}
  enabled: false
  alwaysRun: true
• type: sequence-import
  parameters: {}
  enabled: false
  alwaysRun: true
• type: soap
  parameters: {}
  enabled: false
  alwaysRun: true
• type: spider
  parameters: {}
  enabled: false
  alwaysRun: true
  tests:
  • name: At least 100 URLs found
    type: stats
    onFail: INFO
    statistic: automation.spider.urls.added
    operator: '>='
    value: 100
• type: spiderAjax
  parameters: {}
  enabled: false
  alwaysRun: true
  tests:
  • name: At least 100 URLs found
    type: stats
    onFail: INFO
    statistic: spiderAjax.urls.added
    operator: '>='
    value: 100
• type: spiderClient
  parameters: {}
  enabled: false
  alwaysRun: true
• type: delay
  parameters: {}
  enabled: false
  alwaysRun: true
• type: passiveScan-wait
  parameters: {}
  enabled: false
  alwaysRun: true
• type: prune
  parameters: {}
  enabled: false
  alwaysRun: true
• type: activeScan
  parameters: {}
  policyDefinition:
  defaultStrength: MEDIUM
  enabled: false
  alwaysRun: true
• type: sequence-activeScan
  parameters: {}
  policyDefinition:
  defaultStrength: MEDIUM
  enabled: false
  alwaysRun: true
• type: export
  parameters: {}
  enabled: false
  alwaysRun: true
• type: outputSummary
  parameters: {}
  enabled: false
  alwaysRun: true
• type: report
  parameters:
  reportTitle: ZAP by Checkmarx Scanning Report
  enabled: false
  alwaysRun: true
• type: exitStatus
  parameters: {}
  enabled: false
  alwaysRun: true

[psiinon]

Updated for alwaysRun and tweaked the example plan to remove some irrelevant warnings.

[psiinon]

Checkmarx One – Scan Summary & Details – 0030cf1a-d751-4aea-aecb-6ae3df2f187c

Fixed Issues (4)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	CVE-2025-53864	Maven-com.google.code.gson:gson-2.10.1
	CVE-2025-53864	Maven-com.google.code.gson:gson-2.3.1
	CVE-2025-53864	Maven-com.google.code.gson:gson-2.11.0
	CVE-2025-53864	Maven-com.google.code.gson:gson-2.8.5

[thc202]

Thank you!