"AA03": { "description": "Weakness in SSO Authorization", "source": (Process, Element), "target": (Process, Server), "condition": "target.implementsAuthenticationScheme is False", },

What if the Process implements BasicAuth or uses mutual TLS (neither of which is SSO)?
If the Process uses SAML or OAuth, then maybe.
Maybe authenticationScheme as a string var is neces

Apply OWASP ZAProxy on merge
It would be good to run OWASP ZAProxy on Threat Dragon

Solution
ZAP can be run from github:
https://www.zaproxy.org/blog/2020-04-09-automate-security-testing-with-zap-and-github-actions/