ZAP API Scan Report

- Site: [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Sub Resource Integrity Attribute Missing** [90003] total: 1:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/metadata](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/metadata)
- **Cookie with SameSite Attribute None** [10054] total: 10:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/pen/pen](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/pen/pen)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/schoolreport/mincode?type=type](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/schoolreport/mincode?type=type)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/demog/pen](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/demog/pen)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/studentcredential/pen/type/type](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/studentcredential/pen/type/type)
- ..
- **Information Disclosure - Debug Error Messages** [10023] total: 1:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- **Insufficient Site Isolation Against Spectre Vulnerability** [90004] total: 2:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/metadata](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/metadata)
- **Unexpected Content-Type was returned** [100001] total: 4:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/computeMetadata/v1/](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/computeMetadata/v1/)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/metadata/instance](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/metadata/instance)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/opc/v1/instance/](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/opc/v1/instance/)
- **Non-Storable Content** [10049] total: 13:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/certificate/report/data/pen](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/certificate/report/data/pen)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/document/pen?docType=PDF&docFormat=PDF](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/document/pen?docType=PDF&docFormat=PDF)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/schoolreport/mincode?type=type](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/schoolreport/mincode?type=type)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/demog/pen](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/demog/pen)
- ..
- **Session Management Response Identified** [10112] total: 12:
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/pen/pen](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/pen/pen)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/schoolreport/mincode?type=type](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/schoolreport/mincode?type=type)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/demog/pen](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/student/demog/pen)
- [https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/studentcredential/pen/type/type](https://educ-grad-business-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/studentcredential/pen/type/type)
- ..

View the [following link](https://github.com/bcgov/EDUC-GRAD-BUSINESS-API/actions/runs/15588968314) to download the report.
RunnerID:15588968314

---
[ZAP by Checkmarx](https://checkmarx.com/)

Download the ZAP report from the linked GitHub Actions run and review the listed alerts across the affected API endpoints. Identify which findings represent actionable application issues, address the confirmed security problems, and rerun the scan to verify that the relevant alerts are resolved.

Written by the indexing model from the issue text.