ZAP API Scan Report

- Site: [https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 1:
- [https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- **A Server Error response code was returned by the server** [100000] total: 76:
- [https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca)
- [https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/](https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/)
- [https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/._darcs](https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.bzr](https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Permissions Policy Header Not Set** [10063] total: 1:
- [https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- **Strict-Transport-Security Header Not Set** [10035] total: 1:
- [https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- **Unexpected Content-Type was returned** [100001] total: 78:
- [https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca)
- [https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/](https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/)
- [https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/._darcs](https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.bzr](https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **A Client Error response code was returned by the server** [100000] total: 2:
- [https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca?aaa=bbb](https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca?aaa=bbb)
- [https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense](https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense)
- **Non-Storable Content** [10049] total: 1:
- [https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-course-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)

View the [following link](https://github.com/bcgov/EDUC-GRAD-COURSE-API/actions/runs/7489153447) to download the report.
RunnerID:7489153447

Download the ZAP report from GitHub Actions run 7489153447 and review the listed alerts for the API documentation endpoint and root paths. Start by reproducing the scan against the reported site and trace the server-error and response-header findings to the API entry points. Done means the reported findings are addressed and the scan results are verified.

Written by the indexing model from the issue text.