bcgov / bcgov/EDUC-PEN-REPLICATION-API
ZAP API Scan Report
- Dominant language
- Java
- Stars
- 1
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
- Site: [https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca](https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 1:
- [https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **A Server Error response code was returned by the server** [100000] total: 61:
- [https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca](https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca)
- [https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca/](https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca/)
- [https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca/._darcs](https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca/.bzr](https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Permissions Policy Header Not Set** [10063] total: 1:
- [https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **Strict-Transport-Security Header Not Set** [10035] total: 1:
- [https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **Unexpected Content-Type was returned** [100001] total: 61:
- [https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca](https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca)
- [https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca/](https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca/)
- [https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca/._darcs](https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca/.bzr](https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Non-Storable Content** [10049] total: 1:
- [https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://pen-replication-api-8878b4-test-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
View the [following link](https://github.com/bcgov/EDUC-PEN-REPLICATION-API/actions/runs/5095480796) to download the report.
RunnerID:5095480796
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with the linked GitHub Actions run and download the ZAP API scan report. Review the reported responses for /v3/api-docs and the listed server-error endpoints, then identify the relevant API configuration or implementation. Done means the reported security and response issues are addressed and the ZAP scan is rerun without these alerts.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions, java
- Domain
- api, backend, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100