ZAP API Scan Report

[github-actions]

• Site: https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca
  New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 1:
    • https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/v3/api-docs
  • Permissions Policy Header Not Set [10063] total: 1:
    • https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/v3/api-docs
  • Strict-Transport-Security Header Not Set [10035] total: 1:
    • https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/v3/api-docs
  • Unexpected Content-Type was returned [100001] total: 13:
    • https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca
    • https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/
    • https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/7972277773617074367
    • https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/actuator/health
    • https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/computeMetadata/v1/
    • ..
  • Non-Storable Content [10049] total: 1:
    • https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/v3/api-docs

View the following link to download the report.
RunnerID:13638567194

---

ZAP by Checkmarx