ZAP API Scan Report

- Site: [https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca](https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 1:
- [https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **A Server Error response code was returned by the server** [100000] total: 68:
- [https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca](https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca)
- [https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/](https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/)
- [https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/._darcs](https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/.bzr](https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Permissions Policy Header Not Set** [10063] total: 1:
- [https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **Strict-Transport-Security Header Not Set** [10035] total: 1:
- [https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **Unexpected Content-Type was returned** [100001] total: 70:
- [https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca](https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca)
- [https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/](https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/)
- [https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/._darcs](https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/.bzr](https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **A Client Error response code was returned by the server** [100000] total: 2:
- [https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca?aaa=bbb](https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca?aaa=bbb)
- [https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense](https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense)
- **Non-Storable Content** [10049] total: 1:
- [https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://pen-replication-api-8878b4-dev-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)

View the [following link](https://github.com/bcgov/EDUC-PEN-REPLICATION-API/actions/runs/6228705075) to download the report.
RunnerID:6228705075

Download the ZAP report from the linked GitHub Actions run and review the findings for the API host, especially /v3/api-docs and the root-path probes. Determine which reported server errors, unexpected content types, and missing security headers are actionable, then rerun the API scan to confirm the resolved findings.

Written by the indexing model from the issue text.