ZAP API Scan Report

- Site: [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Sub Resource Integrity Attribute Missing** [90003] total: 1:
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/metadata](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/metadata)
- **A Server Error response code was returned by the server** [100000] total: 4:
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/computeMetadata/v1/](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/computeMetadata/v1/)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/metadata/instance](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/metadata/instance)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/opc/v1/instance/](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/opc/v1/instance/)
- **Cookie with SameSite Attribute None** [10054] total: 5:
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/save-course-restriction](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/save-course-restriction)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/save-course-restriction/courseRestrictionId](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/save-course-restriction/courseRestrictionId)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse)
- **Information Disclosure - Debug Error Messages** [10023] total: 1:
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- **Insufficient Site Isolation Against Spectre Vulnerability** [90004] total: 2:
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/metadata](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/metadata)
- **Unexpected Content-Type was returned** [100001] total: 4:
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/computeMetadata/v1/](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/computeMetadata/v1/)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/metadata/instance](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/metadata/instance)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/opc/v1/instance/](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/opc/v1/instance/)
- **A Client Error response code was returned by the server** [100000] total: 161:
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse/studentCourseID](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse/studentCourseID)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse/studentCourseID/](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse/studentCourseID/)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/7533834421049699441](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/7533834421049699441)
- ..
- **Non-Storable Content** [10049] total: 5:
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/save-course-restriction](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/save-course-restriction)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/course/event/history](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/course/event/history)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/save-course-restriction/courseRestrictionId](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/save-course-restriction/courseRestrictionId)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse)
- **Session Management Response Identified** [10112] total: 13:
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course?courseCode=courseCode&courseLevel=courseLevel](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course?courseCode=courseCode&courseLevel=courseLevel)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/courseID](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/courseID)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse/studentid/studentID?sortForUI=false](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse/studentid/studentID?sortForUI=false)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/course/course-requirement/course-list](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/course/course-requirement/course-list)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/course/course-restriction/course-list](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/course/course-restriction/course-list)
- ..

View the [following link](https://github.com/bcgov/EDUC-GRAD-COURSE-API/actions/runs/21076342436) to download the report.
RunnerID:21076342436

---
[ZAP by Checkmarx](https://checkmarx.com/)

Start with the linked GitHub Actions run and its ZAP report, then inspect the listed API endpoints and alert categories. Determine which findings are actionable rather than scanner noise, address the confirmed security issues, and rerun the scan to verify that the relevant alerts are resolved.

Written by the indexing model from the issue text.