ZAP API Scan Report

- Site: [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **A Server Error response code was returned by the server** [100000] total: 1:
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **Cookie with SameSite Attribute None** [10054] total: 12:
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/school/pdf](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/school/pdf)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictnongradyearend?slrt=slrt&drt=drt&srt=srt](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictnongradyearend?slrt=slrt&drt=drt&srt=srt)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictyearend?slrt=slrt&drt=drt&srt=srt](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictyearend?slrt=slrt&drt=drt&srt=srt)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/edw/snapshot](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/edw/snapshot)
- ..
- **Unexpected Content-Type was returned** [100001] total: 3:
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca?aaa=bbb](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca?aaa=bbb)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **A Client Error response code was returned by the server** [100000] total: 5875:
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/._darcs](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/.bzr](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Non-Storable Content** [10049] total: 13:
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/school/pdf](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/school/pdf)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictnongradyearend?slrt=slrt&drt=drt&srt=srt](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictnongradyearend?slrt=slrt&drt=drt&srt=srt)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictsupppdf?slrt=slrt&drt=drt&srt=srt](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictsupppdf?slrt=slrt&drt=drt&srt=srt)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictyearend?slrt=slrt&drt=drt&srt=srt](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictyearend?slrt=slrt&drt=drt&srt=srt)
- ..
- **Session Management Response Identified** [10112] total: 12:
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/school/pdf](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/school/pdf)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictnongradyearend?slrt=slrt&drt=drt&srt=srt](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictnongradyearend?slrt=slrt&drt=drt&srt=srt)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictyearend?slrt=slrt&drt=drt&srt=srt](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictyearend?slrt=slrt&drt=drt&srt=srt)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schoolmonth](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schoolmonth)
- ..

View the [following link](https://github.com/bcgov/EDUC-GRAD-GRADUATION-API/actions/runs/7937430668) to download the report.
RunnerID:7937430668

Start by reviewing the ZAP report from GitHub Actions run 7937430668 and the listed API endpoints, especially the metadata, cookie, content-type, and session-management alerts. Determine which findings are actionable, address the confirmed issues, and rerun the ZAP scan to verify the report no longer contains unresolved findings.

Written by the indexing model from the issue text.