ZAP API Scan Report

- Site: [https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca](https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 1:
- [https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca/v3/api-docs](https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **A Server Error response code was returned by the server** [100000] total: 61:
- [https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca](https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca)
- [https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca/](https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca/)
- [https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca/._darcs](https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca/._darcs)
- [https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca/.bzr](https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca/.bzr)
- [https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca/.DS_Store](https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Permissions Policy Header Not Set** [10063] total: 1:
- [https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca/v3/api-docs](https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **Strict-Transport-Security Header Not Set** [10035] total: 1:
- [https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca/v3/api-docs](https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **Unexpected Content-Type was returned** [100001] total: 61:
- [https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca](https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca)
- [https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca/](https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca/)
- [https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca/._darcs](https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca/._darcs)
- [https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca/.bzr](https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca/.bzr)
- [https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca/.DS_Store](https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Non-Storable Content** [10049] total: 1:
- [https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca/v3/api-docs](https://student-api-75e61b-test.apps.silver.devops.gov.bc.ca/v3/api-docs)

View the [following link](https://github.com/bcgov/EDUC-STUDENT-API/actions/runs/4502689307) to download the report.
RunnerID:4502689307

Download the ZAP report from the linked GitHub Actions run and reproduce the findings against the site, especially /v3/api-docs. Determine which reported server errors, unexpected content types, and missing security headers are actionable, then rerun the ZAP scan to confirm the resolved findings.

Written by the indexing model from the issue text.