ZAP API Scan Report

- Site: [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Application Error Disclosure** [90022] total: 1:
- [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- **A Server Error response code was returned by the server** [100000] total: 1:
- [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **Cookie with SameSite Attribute None** [10054] total: 14:
- [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/batchjobtype](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/batchjobtype)
- [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/batchjobtype](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/batchjobtype)
- [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/regenerate/student-report?reportType=reportType](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/regenerate/student-report?reportType=reportType)
- [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/report/school/archive](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/report/school/archive)
- ..
- **Information Disclosure - Debug Error Messages** [10023] total: 1:
- [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- **Unexpected Content-Type was returned** [100001] total: 1:
- [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **A Client Error response code was returned by the server** [100000] total: 1214:
- [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/batchjobtype/batchJobTypeCode](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/batchjobtype/batchJobTypeCode)
- [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/batchjobtype/batchJobTypeCode/](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/batchjobtype/batchJobTypeCode/)
- [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/schedule/remove/jobId](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/schedule/remove/jobId)
- [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/schedule/remove/jobId/](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/schedule/remove/jobId/)
- [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca)
- ..
- **Non-Storable Content** [10049] total: 13:
- [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/batchjobtype](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/batchjobtype)
- [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/batchjobtype](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/batchjobtype)
- [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/report/school/archive](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/report/school/archive)
- [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/report/student/delete](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/report/student/delete)
- ..
- **Session Management Response Identified** [10112] total: 12:
- [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/batchjobtype](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/batchjobtype)
- [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/batchjobtype](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/batchjobtype)
- [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/report/school/archive](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/report/school/archive)
- [https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/report/student/delete](https://educ-grad-batch-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/batch/report/student/delete)
- ..

View the [following link](https://github.com/bcgov/EDUC-GRAD-BATCH-GRADUATION-API/actions/runs/11944528311) to download the report.
RunnerID:11944528311

---
ZAP is supported by the [Crash Override Open Source Fellowship](https://crashoverride.com/?zap=act)

Download the ZAP report from GitHub Actions run 11944528311 and review the alerts against the listed API endpoints, including /api/v1/api-docs and /latest/meta-data/. Start by reproducing the reported responses in the development environment. Done means the relevant alerts are addressed or shown to be false positives and the scan is rerun successfully.

Written by the indexing model from the issue text.