ZAP API Scan Report

- Site: [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **A Server Error response code was returned by the server** [100000] total: 1:
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **Cookie with SameSite Attribute None** [10054] total: 10:
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assessment-algorithm/pen/pen](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assessment-algorithm/pen/pen)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assmtCode](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assmtCode)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assmtCode/pen/pen?sortForUI=false](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assmtCode/pen/pen?sortForUI=false)
- ..
- **Unexpected Content-Type was returned** [100001] total: 3:
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca?aaa=bbb](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca?aaa=bbb)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **A Client Error response code was returned by the server** [100000] total: 1153:
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/._darcs](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/.bzr](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Non-Storable Content** [10049] total: 10:
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assessment-algorithm/pen/pen](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assessment-algorithm/pen/pen)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assmtCode](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assmtCode)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assmtCode/pen/pen?sortForUI=false](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assmtCode/pen/pen?sortForUI=false)
- ..
- **Session Management Response Identified** [10112] total: 10:
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assessment-algorithm/pen/pen](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assessment-algorithm/pen/pen)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assmtCode](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assmtCode)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assmtCode/pen/pen?sortForUI=false](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assmtCode/pen/pen?sortForUI=false)
- ..

View the [following link](https://github.com/bcgov/EDUC-GRAD-ASSESSMENT-API/actions/runs/10477392648) to download the report.
RunnerID:10477392648

---
ZAP is supported by the [Crash Override Open Source Fellowship](https://crashoverride.com/?zap=act)

Download the ZAP report from the linked GitHub Actions run and review the listed alerts and affected API endpoints, starting with the server-error, cookie, content-type, and session-management findings. Confirm which alerts are valid for this service, then address the confirmed issues and rerun the ZAP scan to verify the findings are resolved.

Written by the indexing model from the issue text.