ZAP API Scan Report

- Site: [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 1:
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- **A Server Error response code was returned by the server** [100000] total: 15:
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca)
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/)
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.htaccess](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.htaccess)
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/7344792794599907404](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/7344792794599907404)
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api)
- ..
- **Strict-Transport-Security Header Not Set** [10035] total: 1:
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- **Timestamp Disclosure - Unix** [10096] total: 1:
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- **Unexpected Content-Type was returned** [100001] total: 15:
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca)
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/)
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.htaccess](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.htaccess)
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/7344792794599907404](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/7344792794599907404)
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api)
- ..

View the [following link](https://github.com/bcgov/EDUC-GRAD-BUSINESS-API/actions/runs/3024507317) to download the report.
RunnerID:3024507317

Start by downloading the ZAP report from the linked GitHub Actions run and reviewing the listed findings for the API and /api/v1/api-docs endpoint. Inspect the responses for the reported missing headers, server errors, timestamps, and content types. Done means the applicable alerts are addressed or documented as expected, then the scan is rerun to verify the results.

Written by the indexing model from the issue text.