ZAP API Scan Report

- Site: [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 1:
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- **A Server Error response code was returned by the server** [100000] total: 67:
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca)
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/)
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/._darcs](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.bzr](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Permissions Policy Header Not Set** [10063] total: 1:
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- **Strict-Transport-Security Header Not Set** [10035] total: 1:
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- **Unexpected Content-Type was returned** [100001] total: 67:
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca)
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/)
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/._darcs](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.bzr](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Non-Storable Content** [10049] total: 1:
- [https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-business-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)

View the [following link](https://github.com/bcgov/EDUC-GRAD-BUSINESS-API/actions/runs/4167093931) to download the report.
RunnerID:4167093931

Start with the linked GitHub Actions run and its ZAP report, focusing on the /api/v1/api-docs endpoint and the reported server-error responses. Determine which findings are expected versus actionable, then verify completion by rerunning the scan and confirming the relevant alerts are resolved.

Written by the indexing model from the issue text.