OWASP ZAP Portal Scan Results

- Site: [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Cookie with SameSite Attribute None** [10054] total: 2:
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca)
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/robots.txt](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/robots.txt)
- **Cross-Origin-Embedder-Policy Header Missing or Invalid** [90004] total: 4:
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca)
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/)
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/robots.txt](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/sitemap.xml](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Cross-Origin-Opener-Policy Header Missing or Invalid** [90004] total: 4:
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca)
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/)
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/robots.txt](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/sitemap.xml](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Cross-Origin-Resource-Policy Header Missing or Invalid** [90004] total: 5:
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca)
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/)
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/favicon.ico](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/favicon.ico)
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/robots.txt](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/sitemap.xml](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Modern Web Application** [10109] total: 4:
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca)
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/)
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/robots.txt](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/sitemap.xml](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Session Management Response Identified** [10112] total: 2:
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca)
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/robots.txt](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/robots.txt)
- **Storable but Non-Cacheable Content** [10049] total: 5:
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca)
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/)
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/favicon.ico](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/favicon.ico)
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/robots.txt](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/sitemap.xml](https://alcs-dev-portal.apps.silver.devops.gov.bc.ca/sitemap.xml)

**Ignored Alerts**
- **CSP: Failure to Define Directive with No Fallback** [10055] total: 4:
- **CSP: style-src unsafe-inline** [10055] total: 4:
- **Dangerous JS Functions** [10110] total: 1:
- **Re-examine Cache-control Directives** [10015] total: 4:

View the [following link](https://github.com/bcgov/alcs/actions/runs/34004027776) to download the report.
RunnerID:34004027776

---
[ZAP by Checkmarx](https://checkmarx.com/)

The issue names no source files, tests, or entry point; start by downloading the linked OWASP ZAP report and reviewing the listed portal URLs and alerts. Determine which findings require changes and verify the portal responses after remediation; done means the agreed alerts are resolved or explicitly accounted for.

Written by the indexing model from the issue text.