bcgov / bcgov/EDUC-GRAD-STUDENT-API
ZAP API Scan Report
- Dominant language
- Java
- Stars
- 0
- Forks
- 1
- PR merge metrics
- No merged PRs in 30d
Description
- Site: [https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 1:
- [https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- **A Server Error response code was returned by the server** [100000] total: 67:
- [https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca)
- [https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/](https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/)
- [https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/._darcs](https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.bzr](https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Permissions Policy Header Not Set** [10063] total: 1:
- [https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- **Strict-Transport-Security Header Not Set** [10035] total: 1:
- [https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- **Unexpected Content-Type was returned** [100001] total: 67:
- [https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca](https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca)
- [https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/](https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/)
- [https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/._darcs](https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.bzr](https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Non-Storable Content** [10049] total: 1:
- [https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-grad-student-api-77c02f-dev-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
View the [following link](https://github.com/bcgov/EDUC-GRAD-STUDENT-API/actions/runs/4018974234) to download the report.
RunnerID:4018974234
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with the linked GitHub Actions run and download the ZAP report. Inspect the API documentation endpoint and the root and probed responses listed in the report to determine which alerts are reproducible and in scope. Done means the confirmed alerts are addressed and the ZAP scan no longer reports them.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- api, backend, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100