fix(cicd): use the ZAP API instead of the full scan

Author: timoa

.github/workflows/nodejs.yml

@@ -190,9 +190,10 @@ jobs:
         run: npm start > /dev/null &
 
       - name: Run ZAP Scan
-        uses: zaproxy/action-full-scan@6eade0f93b10fad8cfb4e63b979703a2cbd0cc98 # tag=v0.4.0
+        uses: zaproxy/action-api-scan@v0.1.1
         with:
-          target: http://localhost:3000
+          target: http://localhost:3000/swagger/json
+          format: openapi
 
   # -- PRE-RELEASE ------------------------------------------------------------
   pre-release: