ZAP API Scan Report

[github-actions]

• Site: https://educ-rule-engine-api-77c02f-dev.apps.silver.devops.gov.bc.ca
  New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 1:
    • https://educ-rule-engine-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs
  • Permissions Policy Header Not Set [10063] total: 1:
    • https://educ-rule-engine-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs
  • Strict-Transport-Security Header Not Set [10035] total: 1:
    • https://educ-rule-engine-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs
  • Unexpected Content-Type was returned [100001] total: 16:
    • https://educ-rule-engine-api-77c02f-dev.apps.silver.devops.gov.bc.ca
    • https://educ-rule-engine-api-77c02f-dev.apps.silver.devops.gov.bc.ca/
    • https://educ-rule-engine-api-77c02f-dev.apps.silver.devops.gov.bc.ca/9120703065164512566
    • https://educ-rule-engine-api-77c02f-dev.apps.silver.devops.gov.bc.ca/actuator/health
    • https://educ-rule-engine-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api
    • ..
  • Non-Storable Content [10049] total: 1:
    • https://educ-rule-engine-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs

View the following link to download the report.
RunnerID:17656575869

---

ZAP by Checkmarx