ZAP API Scan Report

- Site: [https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca](https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 1:
- [https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **A Server Error response code was returned by the server** [100000] total: 68:
- [https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca](https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca)
- [https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca/](https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca/)
- [https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca/._darcs](https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca/.bzr](https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Permissions Policy Header Not Set** [10063] total: 1:
- [https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **Strict-Transport-Security Header Not Set** [10035] total: 1:
- [https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **Unexpected Content-Type was returned** [100001] total: 70:
- [https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca](https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca)
- [https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca/](https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca/)
- [https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca/._darcs](https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca/.bzr](https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **A Client Error response code was returned by the server** [100000] total: 2:
- [https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca?aaa=bbb](https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca?aaa=bbb)
- [https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense](https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense)
- **Non-Storable Content** [10049] total: 1:
- [https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://institute-api-75e61b-dev-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)

View the [following link](https://github.com/bcgov/EDUC-INSTITUTE-API/actions/runs/5721057308) to download the report.
RunnerID:5721057308

Download the ZAP report from GitHub Actions run 5721057308 and review the listed alerts for the API host, especially /v3/api-docs and the server-error responses. Trace the response and header configuration responsible for these findings, then rerun the ZAP scan to verify the intended alerts are resolved.

Written by the indexing model from the issue text.