ZAP API Scan Report

- Site: [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **A Server Error response code was returned by the server** [100000] total: 1:
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **Cookie with SameSite Attribute None** [10054] total: 12:
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v2/send-email](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v2/send-email)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/complete?demographicsChanged=true](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/complete?demographicsChanged=true)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/info](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/info)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/notify-stale-return](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/notify-stale-return)
- ..
- **Information Disclosure - Debug Error Messages** [10023] total: 1:
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **Unexpected Content-Type was returned** [100001] total: 1:
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **A Client Error response code was returned by the server** [100000] total: 214:
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/._darcs](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/.bzr](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Non-Storable Content** [10049] total: 12:
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v2/send-email](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v2/send-email)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/complete?demographicsChanged=true](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/complete?demographicsChanged=true)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/info](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/info)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/notify-stale-return](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/notify-stale-return)
- ..

View the [following link](https://github.com/bcgov/EDUC-STUDENT-PROFILE-EMAIL-API/actions/runs/4802463380) to download the report.
RunnerID:4802463380

Download the ZAP report from the linked GitHub Actions run and review the findings for the listed API endpoints, especially /latest/meta-data/ and /v3/api-docs. Determine which alerts represent actionable application issues, address the confirmed findings, and rerun the API scan to verify that they no longer appear.

Written by the indexing model from the issue text.