ZAP API Scan Report

- Site: [https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 1:
- [https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- **A Server Error response code was returned by the server** [100000] total: 76:
- [https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca)
- [https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/](https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/)
- [https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/._darcs](https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.bzr](https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Permissions Policy Header Not Set** [10063] total: 1:
- [https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- **Strict-Transport-Security Header Not Set** [10035] total: 1:
- [https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- **Unexpected Content-Type was returned** [100001] total: 78:
- [https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca)
- [https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/](https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/)
- [https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/._darcs](https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.bzr](https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **A Client Error response code was returned by the server** [100000] total: 2:
- [https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca?aaa=bbb](https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca?aaa=bbb)
- [https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense](https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense)
- **Non-Storable Content** [10049] total: 1:
- [https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-graduation-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)

View the [following link](https://github.com/bcgov/EDUC-GRAD-GRADUATION-API/actions/runs/5871218486) to download the report.
RunnerID:5871218486

Start by downloading the ZAP report from GitHub Actions run 5871218486 and reviewing the findings for the API docs endpoint and root URL. Trace the reported response headers, server errors, and content types in the Java API, then rerun the ZAP scan; done means the reported alerts are addressed or explicitly explained.

Written by the indexing model from the issue text.