ZAP API Scan Report

- Site: [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **A Server Error response code was returned by the server** [100000] total: 1:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **Cookie with SameSite Attribute None** [10054] total: 13:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/amalgamated/schoolreport/mincode?type=type](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/amalgamated/schoolreport/mincode?type=type)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/certificate/report/data/pen](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/certificate/report/data/pen)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/document/pen?docType=PDF&docFormat=PDF](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/document/pen?docType=PDF&docFormat=PDF)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/pen/pen](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/pen/pen)
- ..
- **Unexpected Content-Type was returned** [100001] total: 3:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca?aaa=bbb](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca?aaa=bbb)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **A Client Error response code was returned by the server** [100000] total: 1406:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/._darcs](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/.bzr](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Non-Storable Content** [10049] total: 12:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/certificate/report/data/pen](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/certificate/report/data/pen)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/document/pen?docType=PDF&docFormat=PDF](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/document/pen?docType=PDF&docFormat=PDF)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/pen/pen](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/pen/pen)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/schoolreport/mincode?type=type](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/schoolreport/mincode?type=type)
- ..
- **Session Management Response Identified** [10112] total: 12:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/amalgamated/schoolreport/mincode?type=type](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/amalgamated/schoolreport/mincode?type=type)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/document/pen?docType=PDF&docFormat=PDF](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/document/pen?docType=PDF&docFormat=PDF)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/pen/pen](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/pen/pen)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/schoolreport/mincode?type=type](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/schoolreport/mincode?type=type)
- ..

View the [following link](https://github.com/bcgov/EDUC-GRAD-BUSINESS-API/actions/runs/8794337208) to download the report.
RunnerID:8794337208

---
ZAP is supported by the [Crash Override Open Source Fellowship](https://crashoverride.com/?zap=act)

Start with the linked GitHub Actions ZAP report and review the listed alerts, especially the /latest/meta-data/ and /api/v1 endpoints. Trace each affected response to its API or deployment configuration, then rerun the ZAP scan to confirm the findings are resolved or explicitly triaged.

Written by the indexing model from the issue text.