ZAP API Scan Report

- Site: [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **A Server Error response code was returned by the server** [100000] total: 7:
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/computeMetadata/v1/](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/computeMetadata/v1/)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/metadata/instance](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/metadata/instance)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/metadata/v1](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/metadata/v1)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/opc/v1/instance/](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/opc/v1/instance/)
- ..
- **Cookie with SameSite Attribute None** [10054] total: 5:
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/tenantAccess?clientID=clientID&tenantID=tenantID](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/tenantAccess?clientID=clientID&tenantID=tenantID)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id)
- **Cross-Origin-Resource-Policy Header Missing or Invalid** [90004] total: 1:
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **Information Disclosure - Debug Error Messages** [10023] total: 1:
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **Unexpected Content-Type was returned** [100001] total: 7:
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/computeMetadata/v1/](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/computeMetadata/v1/)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/metadata/instance](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/metadata/instance)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/metadata/v1](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/metadata/v1)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/opc/v1/instance/](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/opc/v1/instance/)
- ..
- **A Client Error response code was returned by the server** [100000] total: 34:
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id/](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id/)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/6231654436388073157](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/6231654436388073157)
- ..
- **Non-Storable Content** [10049] total: 5:
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/tenantAccess?clientID=clientID&tenantID=tenantID](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/tenantAccess?clientID=clientID&tenantID=tenantID)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id)
- **Session Management Response Identified** [10112] total: 10:
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id?identitytype=identitytype&identityvalue=identityvalue](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id?identitytype=identitytype&identityvalue=identityvalue)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/accessChannelCodes](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/accessChannelCodes)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/id)
- [https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/identityTypeCodes](https://digitalid-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/digital-id/identityTypeCodes)
- ..

View the [following link](https://github.com/bcgov/EDUC-DIGITALID-API/actions/runs/28611830519) to download the report.
RunnerID:28611830519

---
[ZAP by Checkmarx](https://checkmarx.com/)

Start with the ZAP report linked from GitHub Actions run 28611830519 and review the listed API endpoints and alerts. Determine which findings are actionable for the service, then verify that the relevant endpoints no longer produce the reported security findings in a follow-up ZAP scan.

Written by the indexing model from the issue text.