ZAP Scan Baseline Report
- Dominant language
- Python
- Stars
- 2
- Forks
- 9
- PR merge metrics
- No merged PRs in 30d
Description
- Site: [https://itvr-backend-dev.apps.silver.devops.gov.bc.ca](https://itvr-backend-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 3:
- [https://itvr-backend-dev.apps.silver.devops.gov.bc.ca](https://itvr-backend-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-backend-dev.apps.silver.devops.gov.bc.ca/robots.txt](https://itvr-backend-dev.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://itvr-backend-dev.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-backend-dev.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Permissions Policy Header Not Set** [10063] total: 3:
- [https://itvr-backend-dev.apps.silver.devops.gov.bc.ca](https://itvr-backend-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-backend-dev.apps.silver.devops.gov.bc.ca/robots.txt](https://itvr-backend-dev.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://itvr-backend-dev.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-backend-dev.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Strict-Transport-Security Header Not Set** [10035] total: 3:
- [https://itvr-backend-dev.apps.silver.devops.gov.bc.ca](https://itvr-backend-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-backend-dev.apps.silver.devops.gov.bc.ca/robots.txt](https://itvr-backend-dev.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://itvr-backend-dev.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-backend-dev.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Non-Storable Content** [10049] total: 3:
- [https://itvr-backend-dev.apps.silver.devops.gov.bc.ca](https://itvr-backend-dev.apps.silver.devops.gov.bc.ca)
- [https://itvr-backend-dev.apps.silver.devops.gov.bc.ca/robots.txt](https://itvr-backend-dev.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://itvr-backend-dev.apps.silver.devops.gov.bc.ca/sitemap.xml](https://itvr-backend-dev.apps.silver.devops.gov.bc.ca/sitemap.xml)
View the [following link](https://github.com/bcgov/itvr/actions/runs/8744059435) to download the report.
RunnerID:8744059435
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with the linked ZAP baseline report and inspect the backend response-header configuration for the listed development endpoints. Rerun the ZAP scan against the site to verify that the four reported alerts are addressed; the payload does not name a file or test.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- django, python
- Domain
- backend, security, web-dev
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100