ZAP API Scan Report

- Site: [https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 1:
- [https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- **A Server Error response code was returned by the server** [100000] total: 76:
- [https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca)
- [https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca/](https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca/)
- [https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca/._darcs](https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca/.bzr](https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Permissions Policy Header Not Set** [10063] total: 1:
- [https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- **Strict-Transport-Security Header Not Set** [10035] total: 1:
- [https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- **Unexpected Content-Type was returned** [100001] total: 78:
- [https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca)
- [https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca/](https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca/)
- [https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca/._darcs](https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca/.bzr](https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **A Client Error response code was returned by the server** [100000] total: 2:
- [https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca?aaa=bbb](https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca?aaa=bbb)
- [https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense](https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense)
- **Non-Storable Content** [10049] total: 1:
- [https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-algorithm-api-e8a97a-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)

View the [following link](https://github.com/bcgov/EDUC-GRAD-ALGORITHM-API/actions/runs/7425965527) to download the report.
RunnerID:7425965527

Download the ZAP report from the linked GitHub Actions run and review the findings for /api/v1/api-docs and the listed root paths. Reproduce the scan against the development API, then determine which alerts are valid and address or document each one. Done means the relevant ZAP alerts are resolved or explicitly triaged and the scan is rerun.

Written by the indexing model from the issue text.