Add `OwaspZapRecommended` to `RuleSet` definition to cover alerts from Zap over missing headers: - [ ] Sec-Fetch-Dest - [ ] Sec-Fetch-Mode - [ ] Sec-Fetch-Site - [ ] Sec-Fetch-User