bcgov / bcgov/EDUC-RULE-ENGINE-API

ZAP API Scan Report

Ouverte
#495 3 commentaires 0 réactions 0 personnes assignées Voir sur GitHub
Langage dominant
Java
Étoiles
0
Forks
2
Métriques de merge des PR
Aucune PR mergée en 30 j

Description

- Site: [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **A Server Error response code was returned by the server** [100000] total: 1:
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **Cookie with SameSite Attribute None** [10054] total: 2:
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/rule-engine/run-grad-algorithm-rules](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/rule-engine/run-grad-algorithm-rules)
- **Unexpected Content-Type was returned** [100001] total: 1:
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **A Client Error response code was returned by the server** [100000] total: 16:
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca)
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/)
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/7800290315832010800](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/7800290315832010800)
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api)
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/)
- ..
- **Non-Storable Content** [10049] total: 2:
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/rule-engine/run-grad-algorithm-rules](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/rule-engine/run-grad-algorithm-rules)
- **Session Management Response Identified** [10112] total: 2:
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/rule-engine/run-grad-algorithm-rules](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/rule-engine/run-grad-algorithm-rules)

View the [following link](https://github.com/bcgov/EDUC-RULE-ENGINE-API/actions/runs/11944195262) to download the report.
RunnerID:11944195262

---
ZAP is supported by the [Crash Override Open Source Fellowship](https://crashoverride.com/?zap=act)

Guide de contribution

Aucun guide de contribution indexé pour ce dépôt

Piste de recherche

Téléchargez le rapport ZAP depuis l’exécution GitHub Actions liée et examinez les alertes pour /latest/meta-data/, /api/v1/api-docs et /api/v1/rule-engine/run-grad-algorithm-rules. Suivez les réponses du serveur et des cookies pour ces endpoints, puis relancez l’analyse d’API ZAP ; la tâche est considérée comme terminée lorsque les alertes signalées sont résolues ou explicitement triées avec une justification documentée.

Rédigé par le modèle d'indexation à partir du texte de l'issue.

Évaluation

Stack technique
java
Domaine
api, security
Type d'issue
Bug
Difficulté
4/5
Temps estimé
3-5 jours
Activité
À l'abandon
Clarté
À clarifier
Accessibilité débutants
25/100

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.