ZAP API Scan Report

- Site: [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Sub Resource Integrity Attribute Missing** [90003] total: 1:
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/metadata](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/metadata)
- **Cookie with SameSite Attribute None** [10054] total: 9:
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assessment-algorithm/pen/pen](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assessment-algorithm/pen/pen)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assmtCode](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assmtCode)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assmtCode/pen/pen?sortForUI=false](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assmtCode/pen/pen?sortForUI=false)
- ..
- **Insufficient Site Isolation Against Spectre Vulnerability** [90004] total: 2:
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/metadata](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/metadata)
- **Unexpected Content-Type was returned** [100001] total: 4:
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/computeMetadata/v1/](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/computeMetadata/v1/)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/metadata/instance](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/metadata/instance)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/opc/v1/instance/](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/opc/v1/instance/)
- **Non-Storable Content** [10049] total: 11:
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assessment-algorithm/pen/pen](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assessment-algorithm/pen/pen)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assmtCode](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assmtCode)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assmtCode/pen/pen?sortForUI=false](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assmtCode/pen/pen?sortForUI=false)
- ..
- **Session Management Response Identified** [10112] total: 11:
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assessment-algorithm/pen/pen](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assessment-algorithm/pen/pen)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assmtCode](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assmtCode)
- [https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assmtCode/pen/pen?sortForUI=false](https://educ-grad-assessment-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/assessment/assmtCode/pen/pen?sortForUI=false)
- ..

View the [following link](https://github.com/bcgov/EDUC-GRAD-ASSESSMENT-API/actions/runs/15306118451) to download the report.
RunnerID:15306118451

---
[ZAP by Checkmarx](https://checkmarx.com/)

Start by downloading the ZAP report from the linked GitHub Actions run and reviewing the listed API endpoints and alert details. The issue names no source files or tests, and provides no acceptance criteria, so the changes required and what constitutes completion cannot be determined from the issue alone.

Written by the indexing model from the issue text.