* fix(zap_scan): check out ref associated with run * fix(zap_scan): use actions/github-script for labeling issues