[WebGoat](https://www.owasp.org/index.php/Category:OWASP_WebGoat_Project) is a deliberately insecure web application maintained by (OWASP)[https://www.owasp.org] designed to teach web application security lessons. The application is Java-based, and a good example to demonstrate our Security features. Anyway, our checks are not working out of the box, so this issue is to make all the reports working. The application doesn't have a `Dockerfile`, but we already forked it, we can that ourselves. The project is hosted here: https://gitlab.com/gitlab-org/security-products/tests/webgoat