ZAP API Scan Report

- Site: [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **A Server Error response code was returned by the server** [100000] total: 1:
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **Cookie with SameSite Attribute None** [10054] total: 14:
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/school/pdf](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/school/pdf)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictnongradyearend?slrt=slrt&drt=drt&srt=srt](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictnongradyearend?slrt=slrt&drt=drt&srt=srt)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictsupp?slrt=slrt&drt=drt&srt=srt](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictsupp?slrt=slrt&drt=drt&srt=srt)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictsupppdf?slrt=slrt&drt=drt&srt=srt](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictsupppdf?slrt=slrt&drt=drt&srt=srt)
- ..
- **Unexpected Content-Type was returned** [100001] total: 1:
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **A Client Error response code was returned by the server** [100000] total: 5306:
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/1708646419730292064](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/1708646419730292064)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/)
- ..
- **Non-Storable Content** [10049] total: 13:
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/school/pdf](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/school/pdf)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictnongradyearend?slrt=slrt&drt=drt&srt=srt](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictnongradyearend?slrt=slrt&drt=drt&srt=srt)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictsupppdf?slrt=slrt&drt=drt&srt=srt](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictsupppdf?slrt=slrt&drt=drt&srt=srt)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictyearend?slrt=slrt&drt=drt&srt=srt](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictyearend?slrt=slrt&drt=drt&srt=srt)
- ..
- **Session Management Response Identified** [10112] total: 12:
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/school/pdf](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/school/pdf)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictnongradyearend?slrt=slrt&drt=drt&srt=srt](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictnongradyearend?slrt=slrt&drt=drt&srt=srt)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictyearend?slrt=slrt&drt=drt&srt=srt](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schooldistrictyearend?slrt=slrt&drt=drt&srt=srt)
- [https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schoolmonth](https://educ-grad-graduation-api-77c02f-dev.apps.silver.devops.gov.bc.ca/api/v1/graduate/report/schoolmonth)
- ..

View the [following link](https://github.com/bcgov/EDUC-GRAD-GRADUATION-API/actions/runs/12677323242) to download the report.
RunnerID:12677323242

---
[ZAP by Checkmarx](https://checkmarx.com/)

Start with the ZAP report from workflow run 12677323242 and review the listed responses, especially /latest/meta-data/ and the /api/v1/report endpoints. Trace how these API requests produce the reported server errors, cookies, content types, and session responses, then rerun the ZAP scan to confirm the alerts are addressed.

Written by the indexing model from the issue text.