ZAP API Scan Report

- Site: [https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca](https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Cookie with SameSite Attribute None** [10054] total: 8:
- [https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/studentID/address/studentAddressID](https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/studentID/address/studentAddressID)
- [https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/citizenship-codes](https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/citizenship-codes)
- [https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/country-codes](https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/country-codes)
- [https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/province-codes](https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/province-codes)
- [https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/studentID/address](https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/studentID/address)
- ..
- **Insufficient Site Isolation Against Spectre Vulnerability** [90004] total: 1:
- [https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **Unexpected Content-Type was returned** [100001] total: 4:
- [https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/computeMetadata/v1/](https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/computeMetadata/v1/)
- [https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- [https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/metadata/instance](https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/metadata/instance)
- [https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/opc/v1/instance/](https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/opc/v1/instance/)
- **Non-Storable Content** [10049] total: 8:
- [https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/studentID/address/studentAddressID](https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/studentID/address/studentAddressID)
- [https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/citizenship-codes](https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/citizenship-codes)
- [https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/country-codes](https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/country-codes)
- [https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/province-codes](https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/province-codes)
- [https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/studentID/address](https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/studentID/address)
- ..
- **Session Management Response Identified** [10112] total: 8:
- [https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/studentID/address/studentAddressID](https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/studentID/address/studentAddressID)
- [https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/citizenship-codes](https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/citizenship-codes)
- [https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/country-codes](https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/country-codes)
- [https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/province-codes](https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/province-codes)
- [https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/studentID/address](https://scholarships-api-e14b44-dev.apps.silver.devops.gov.bc.ca/api/v1/scholarships/studentID/address)
- ..

View the [following link](https://github.com/bcgov/EDUC-SCHOLARSHIPS-API/actions/runs/18731510929) to download the report.
RunnerID:18731510929

---
ZAP is supported by the [Crash Override Open Source Fellowship](https://crashoverride.com/?zap=act)

Start with the ZAP report linked from the issue and review the listed alerts across the API endpoints and v3/api-docs. Determine which findings require changes in the Java API or its deployment configuration, then rerun the linked ZAP workflow to verify the reported alerts are resolved or appropriately addressed.

Written by the indexing model from the issue text.