ZAP API Scan Report

- Site: [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **A Server Error response code was returned by the server** [100000] total: 1:
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **Cookie with SameSite Attribute None** [10054] total: 12:
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v2/send-email](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v2/send-email)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/complete?demographicsChanged=true](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/complete?demographicsChanged=true)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/info](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/info)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/notify-stale-return](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/notify-stale-return)
- ..
- **Information Disclosure - Debug Error Messages** [10023] total: 1:
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **Unexpected Content-Type was returned** [100001] total: 3:
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca?aaa=bbb](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca?aaa=bbb)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **A Client Error response code was returned by the server** [100000] total: 270:
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/._darcs](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/.bzr](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Non-Storable Content** [10049] total: 12:
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v2/send-email](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v2/send-email)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/complete?demographicsChanged=true](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/complete?demographicsChanged=true)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/info](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/info)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/notify-stale-return](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/notify-stale-return)
- ..
- **Session Management Response Identified** [10112] total: 12:
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v2/send-email](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/api/v2/send-email)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/complete?demographicsChanged=true](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/complete?demographicsChanged=true)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/info](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/info)
- [https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/notify-stale-return](https://student-profile-email-api-8878b4-dev.apps.silver.devops.gov.bc.ca/gmp/notify-stale-return)
- ..

View the [following link](https://github.com/bcgov/EDUC-STUDENT-PROFILE-EMAIL-API/actions/runs/5930955031) to download the report.
RunnerID:5930955031

Download the ZAP report from the linked GitHub Actions run and review the listed alerts for the API endpoints, including /v3/api-docs, /api/v2/send-email, and /latest/meta-data/. Start by reproducing and triaging the reported server errors, cookie attributes, debug messages, content types, and session findings. Done means the relevant findings are addressed or explicitly documented as expected behavior.

Written by the indexing model from the issue text.