ZAP API Scan Report

- Site: [https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca](https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 1:
- [https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **A Server Error response code was returned by the server** [100000] total: 68:
- [https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca](https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca)
- [https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/](https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/)
- [https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/._darcs](https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/.bzr](https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **Permissions Policy Header Not Set** [10063] total: 1:
- [https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **Strict-Transport-Security Header Not Set** [10035] total: 1:
- [https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **Unexpected Content-Type was returned** [100001] total: 70:
- [https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca](https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca)
- [https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/](https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/)
- [https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/._darcs](https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/._darcs)
- [https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/.bzr](https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/.bzr)
- [https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/.DS_Store](https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/.DS_Store)
- ..
- **A Client Error response code was returned by the server** [100000] total: 2:
- [https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca?aaa=bbb](https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca?aaa=bbb)
- [https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense](https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense)
- **Non-Storable Content** [10049] total: 1:
- [https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://trax-notification-api-75e61b-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)

View the [following link](https://github.com/bcgov/EDUC-TRAX-NOTIFICATION-API/actions/runs/8621222402) to download the report.
RunnerID:8621222402

Start with the linked GitHub Actions ZAP report and inspect the service response at /v3/api-docs and the listed root URLs. Determine which reported headers, error responses, content types, and exposed paths are expected for this API. Done means the applicable ZAP alerts are resolved or explicitly explained and a new scan confirms the result.

Written by the indexing model from the issue text.