ZAP API Scan Report

- Site: [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Sub Resource Integrity Attribute Missing** [90003] total: 1:
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/metadata](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/metadata)
- **A Server Error response code was returned by the server** [100000] total: 7:
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/computeMetadata/v1/](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/computeMetadata/v1/)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/metadata/instance](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/metadata/instance)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/metadata/v1](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/metadata/v1)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/opc/v1/instance/](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/opc/v1/instance/)
- ..
- **Cookie with SameSite Attribute None** [10054] total: 5:
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/course/event/history](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/course/event/history)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/save-course-restriction/courseRestrictionId](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/save-course-restriction/courseRestrictionId)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse)
- **Cross-Origin-Resource-Policy Header Missing or Invalid** [90004] total: 2:
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/metadata](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/metadata)
- **Information Disclosure - Debug Error Messages** [10023] total: 1:
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- **Unexpected Content-Type was returned** [100001] total: 7:
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/computeMetadata/v1/](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/computeMetadata/v1/)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/metadata/instance](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/metadata/instance)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/metadata/v1](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/metadata/v1)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/opc/v1/instance/](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/opc/v1/instance/)
- ..
- **A Client Error response code was returned by the server** [100000] total: 161:
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse/studentCourseID](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse/studentCourseID)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse/studentCourseID/](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse/studentCourseID/)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/4233897955474634461](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/4233897955474634461)
- ..
- **Non-Storable Content** [10049] total: 5:
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/course/event/history](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/course/event/history)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/save-course-restriction/courseRestrictionId](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/save-course-restriction/courseRestrictionId)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/studentcourse)
- **Session Management Response Identified** [10112] total: 12:
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course?courseCode=courseCode&courseLevel=courseLevel](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course?courseCode=courseCode&courseLevel=courseLevel)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/courseID](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v2/course/courseID)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/course/course-restriction/course-list](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/course/course-restriction/course-list)
- [https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/course/save-course-requirement](https://educ-grad-course-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/course/save-course-requirement)
- ..

View the [following link](https://github.com/bcgov/EDUC-GRAD-COURSE-API/actions/runs/34280003118) to download the report.
RunnerID:34280003118

---
[ZAP by Checkmarx](https://checkmarx.com/)

Download the ZAP report from the linked GitHub Actions run and review the listed alerts, starting with /api/v1/api-docs, /api/v1/metadata, and the reported course endpoints. Determine which findings represent application issues versus expected scanner responses, then define remediation and verification criteria for the actionable findings.

Written by the indexing model from the issue text.