ZAP API Scan Report

- Site: [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **A Server Error response code was returned by the server** [100000] total: 1:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **Cookie with SameSite Attribute None** [10054] total: 12:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/certificate/report/data/pen](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/certificate/report/data/pen)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/document/pen?docType=PDF&docFormat=PDF](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/document/pen?docType=PDF&docFormat=PDF)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/pen/pen](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/pen/pen)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/schoolreport/mincode?type=type](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/schoolreport/mincode?type=type)
- ..
- **Unexpected Content-Type was returned** [100001] total: 3:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca?aaa=bbb](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca?aaa=bbb)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **A Client Error response code was returned by the server** [100000] total: 1406:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/._darcs](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/.bzr](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Non-Storable Content** [10049] total: 12:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/amalgamated/schoolreport/mincode?type=type](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/amalgamated/schoolreport/mincode?type=type)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/document/pen?docType=PDF&docFormat=PDF](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/document/pen?docType=PDF&docFormat=PDF)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/pen/pen](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/pen/pen)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/schoolreport/mincode?type=type](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/schoolreport/mincode?type=type)
- ..
- **Session Management Response Identified** [10112] total: 12:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/certificate/report/data/pen](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/certificate/report/data/pen)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/document/pen?docType=PDF&docFormat=PDF](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/document/pen?docType=PDF&docFormat=PDF)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/pen/pen](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/pen/pen)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/schoolreport/mincode?type=type](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/schoolreport/mincode?type=type)
- ..

View the [following link](https://github.com/bcgov/EDUC-GRAD-BUSINESS-API/actions/runs/10394428938) to download the report.
RunnerID:10394428938

---
ZAP is supported by the [Crash Override Open Source Fellowship](https://crashoverride.com/?zap=act)

Start with the linked GitHub Actions run and download the ZAP report. Review the listed server-error, cookie, content-type, session-management, and client-error findings across the API endpoints. Done means the findings have been investigated and the ZAP scan has been rerun with the remaining alerts addressed or documented.

Written by the indexing model from the issue text.