ZAP API Scan Report

- Site: [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **A Server Error response code was returned by the server** [100000] total: 1:
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **Cookie with SameSite Attribute None** [10054] total: 10:
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/accessChannelCodes](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/accessChannelCodes)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/identityTypeCodes](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/identityTypeCodes)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/list?studentID=studentID](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/list?studentID=studentID)
- ..
- **Information Disclosure - Debug Error Messages** [10023] total: 1:
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **Unexpected Content-Type was returned** [100001] total: 1:
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **A Client Error response code was returned by the server** [100000] total: 691:
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id/](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id/)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/1321589090745784716](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/1321589090745784716)
- ..
- **Non-Storable Content** [10049] total: 10:
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/accessChannelCodes](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/accessChannelCodes)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/identityTypeCodes](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/identityTypeCodes)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/list?studentID=studentID](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/list?studentID=studentID)
- ..
- **Session Management Response Identified** [10112] total: 10:
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/accessChannelCodes](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/accessChannelCodes)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/identityTypeCodes](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/identityTypeCodes)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/list?studentID=studentID](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/list?studentID=studentID)
- ..

View the [following link](https://github.com/bcgov/EDUC-DIGITALID-API/actions/runs/11002551979) to download the report.
RunnerID:11002551979

---
ZAP is supported by the [Crash Override Open Source Fellowship](https://crashoverride.com/?zap=act)

Start with the linked GitHub Actions run and download the ZAP report. Review the listed API endpoints and each alert category, especially the debug messages, cookie attributes, and unexpected metadata response. Done means the applicable findings are addressed and a subsequent scan confirms the results.

Written by the indexing model from the issue text.