ZAP API Scan Report

- Site: [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **A Server Error response code was returned by the server** [100000] total: 1:
- [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **Cookie with SameSite Attribute None** [10054] total: 12:
- [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/pen-services-macro/macroId](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/pen-services-macro/macroId)
- [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/pen-services-macro?macroTypeCode=macroTypeCode](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/pen-services-macro?macroTypeCode=macroTypeCode)
- [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/validation/issue-field-code](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/validation/issue-field-code)
- [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/validation/issue-type-code](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/validation/issue-type-code)
- [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- ..
- **Unexpected Content-Type was returned** [100001] total: 3:
- [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca?aaa=bbb](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca?aaa=bbb)
- [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense)
- **A Client Error response code was returned by the server** [100000] total: 1185:
- [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/merges/studentMergeID](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/merges/studentMergeID)
- [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/merges/studentMergeID/](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/merges/studentMergeID/)
- [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca)
- [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/)
- [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/._darcs](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/._darcs)
- ..
- **Non-Storable Content** [10049] total: 12:
- [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/pen-services-macro/macroId](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/pen-services-macro/macroId)
- [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/pen-services-macro?macroTypeCode=macroTypeCode](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/pen-services-macro?macroTypeCode=macroTypeCode)
- [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/validation/issue-field-code](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/validation/issue-field-code)
- [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/validation/issue-type-code](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/validation/issue-type-code)
- [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- ..
- **Session Management Response Identified** [10112] total: 12:
- [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/pen-services-macro/macroId](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/pen-services-macro/macroId)
- [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/pen-services-macro?macroTypeCode=macroTypeCode](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/pen-services-macro?macroTypeCode=macroTypeCode)
- [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/validation/issue-field-code](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/validation/issue-field-code)
- [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/validation/issue-type-code](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v1/pen-services/validation/issue-type-code)
- [https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://pen-services-api-8878b4-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- ..

View the [following link](https://github.com/bcgov/EDUC-PEN-SERVICES-API/actions/runs/10100546060) to download the report.
RunnerID:10100546060

Download the ZAP report from the linked GitHub Actions run and review the listed endpoints and alert categories, including the /latest/meta-data/ response and cookie findings. Identify which alerts represent application issues rather than scanner behavior, then confirm that each actionable finding is addressed and the scan no longer reports it.

Written by the indexing model from the issue text.