ZAP API Scan Report

- Site: [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **A Server Error response code was returned by the server** [100000] total: 1:
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **Cookie with SameSite Attribute None** [10054] total: 12:
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestID/documents/documentID](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestID/documents/documentID)
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/pen-request-macro/macroId](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/pen-request-macro/macroId)
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestId/comments](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestId/comments)
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestID/documents](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestID/documents)
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestID/documents/documentID?includeDocData=Y](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestID/documents/documentID?includeDocData=Y)
- ..
- **Information Disclosure - Debug Error Messages** [10023] total: 1:
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **Unexpected Content-Type was returned** [100001] total: 3:
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca?aaa=bbb](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca?aaa=bbb)
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense)
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **A Client Error response code was returned by the server** [100000] total: 1512:
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/id](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/id)
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/id/](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/id/)
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestID/documents/documentID](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestID/documents/documentID)
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestID/documents/documentID/](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestID/documents/documentID/)
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca)
- ..
- **Non-Storable Content** [10049] total: 12:
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestID/documents/documentID](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestID/documents/documentID)
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/pen-request-macro/macroId](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/pen-request-macro/macroId)
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestId/comments](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestId/comments)
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestID/documents](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestID/documents)
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestID/documents/documentID?includeDocData=Y](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestID/documents/documentID?includeDocData=Y)
- ..
- **Session Management Response Identified** [10112] total: 12:
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestID/documents/documentID](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestID/documents/documentID)
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/pen-request-macro/macroId](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/pen-request-macro/macroId)
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestId/comments](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestId/comments)
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestID/documents](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestID/documents)
- [https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestID/documents/documentID?includeDocData=Y](https://pen-request-api-75e61b-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-request/penRequestID/documents/documentID?includeDocData=Y)
- ..

View the [following link](https://github.com/bcgov/EDUC-PEN-REQUEST-API/actions/runs/6513309936) to download the report.
RunnerID:6513309936

Start with the linked GitHub Actions ZAP report and review the listed API endpoints and alert categories. Trace each finding to the API configuration or implementation, then verify the reported security alerts are addressed by rerunning the ZAP scan and confirming the resulting report.

Written by the indexing model from the issue text.