bcgov / bcgov/EDUC-RULE-ENGINE-API

ZAP API Scan Report

Aperta
#495 3 commenti 0 reazioni 0 assegnatari Vedi su GitHub
Lingua principale
Java
Stelle
0
Fork
2
Metriche di merge delle PR
Nessuna PR unita negli ultimi 30g

Descrizione

- Site: [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **A Server Error response code was returned by the server** [100000] total: 1:
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **Cookie with SameSite Attribute None** [10054] total: 2:
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/rule-engine/run-grad-algorithm-rules](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/rule-engine/run-grad-algorithm-rules)
- **Unexpected Content-Type was returned** [100001] total: 1:
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **A Client Error response code was returned by the server** [100000] total: 16:
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca)
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/)
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/7800290315832010800](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/7800290315832010800)
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api)
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/)
- ..
- **Non-Storable Content** [10049] total: 2:
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/rule-engine/run-grad-algorithm-rules](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/rule-engine/run-grad-algorithm-rules)
- **Session Management Response Identified** [10112] total: 2:
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/api-docs)
- [https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/rule-engine/run-grad-algorithm-rules](https://educ-rule-engine-api-e8a97a-dev.apps.silver.devops.gov.bc.ca/api/v1/rule-engine/run-grad-algorithm-rules)

View the [following link](https://github.com/bcgov/EDUC-RULE-ENGINE-API/actions/runs/11944195262) to download the report.
RunnerID:11944195262

---
ZAP is supported by the [Crash Override Open Source Fellowship](https://crashoverride.com/?zap=act)

Guida per i contributori

Nessuna guida per i contributori indicizzata per questo repository

Direzione di ricerca

Scarica il report ZAP dall’esecuzione GitHub Actions collegata ed esamina gli alert per /latest/meta-data/, /api/v1/api-docs e /api/v1/rule-engine/run-grad-algorithm-rules. Traccia le risposte del server e dei cookie per questi endpoint, quindi esegui nuovamente la scansione API di ZAP; l’attività è completata quando gli alert segnalati sono stati risolti o esplicitamente sottoposti a triage con una motivazione documentata.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Valutazione

Stack tecnologico
java
Ambito
api, security
Tipo di issue
Bug
Difficoltà
4/5
Tempo stimato
3-5 giorni
Stato di attività
Ferma
Chiarezza
Da chiarire
Idoneità per principianti
25/100

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.