bcgov / bcgov/EDUC-INSTITUTE-API

ZAP API Scan Report

Open
#178 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
2
Forks
0
PR merge metrics
No merged PRs in 30d

Description

- Site: [https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca](https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 1:
- [https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **A Server Error response code was returned by the server** [100000] total: 62:
- [https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca](https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca)
- [https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca/](https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca/)
- [https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca/._darcs](https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca/.bzr](https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Permissions Policy Header Not Set** [10063] total: 1:
- [https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **Strict-Transport-Security Header Not Set** [10035] total: 1:
- [https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **Unexpected Content-Type was returned** [100001] total: 62:
- [https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca](https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca)
- [https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca/](https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca/)
- [https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca/._darcs](https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca/.bzr](https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Non-Storable Content** [10049] total: 1:
- [https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://institute-api-75e61b-test-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)

View the [following link](https://github.com/bcgov/EDUC-INSTITUTE-API/actions/runs/5216603425) to download the report.
RunnerID:5216603425

Contributor guide

No contributing guide indexed for this repository

Research direction

Download the ZAP report from the linked GitHub Actions run and review the listed header, server-error, content-type, and non-storable-content alerts. The issue names no source files or tests, so confirm with maintainers which findings are in scope and what verification or scan result defines done.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
api, backend, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.