ZAP API Scan Report

- Site: [https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca](https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 1:
- [https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **A Server Error response code was returned by the server** [100000] total: 68:
- [https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca](https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca)
- [https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/](https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/)
- [https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/._darcs](https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/.bzr](https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Permissions Policy Header Not Set** [10063] total: 1:
- [https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **Strict-Transport-Security Header Not Set** [10035] total: 1:
- [https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **Unexpected Content-Type was returned** [100001] total: 70:
- [https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca](https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca)
- [https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/](https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/)
- [https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/._darcs](https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/.bzr](https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **A Client Error response code was returned by the server** [100000] total: 2:
- [https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca?aaa=bbb](https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca?aaa=bbb)
- [https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense](https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense)
- **Non-Storable Content** [10049] total: 1:
- [https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://sld-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)

View the [following link](https://github.com/bcgov/EDUC-SLD-NOTIFICATION-API/actions/runs/8366447366) to download the report.
RunnerID:8366447366

Start by reviewing the linked GitHub Actions run and its ZAP report for the listed header, server-error, content-type, and non-storable-content alerts. Trace the affected API responses from the report, then verify that the findings are resolved by rerunning the scan against the development site.

Written by the indexing model from the issue text.