ZAP Scan Baseline Report

- Site: [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **CSP: Failure to Define Directive with No Fallback** [10055] total: 2:
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **CSP: Wildcard Directive** [10055] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **CSP: script-src unsafe-eval** [10055] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **CSP: style-src unsafe-inline** [10055] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Sub Resource Integrity Attribute Missing** [90003] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Cookie with SameSite Attribute None** [10054] total: 1:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- **Insufficient Site Isolation Against Spectre Vulnerability** [90004] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Private IP Disclosure** [2] total: 1:
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- **Timestamp Disclosure - Unix** [10096] total: 88:
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 4:
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.1b4d.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.1b4d.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.778b.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.778b.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.aa48.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.aa48.js)
- **Modern Web Application** [10109] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Re-examine Cache-control Directives** [10015] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Session Management Response Identified** [10112] total: 2:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- **Storable and Cacheable Content** [10049] total: 11:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.778b.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.778b.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/main.css](https://mds-test.apps.silver.devops.gov.bc.ca/main.css)
- [https://mds-test.apps.silver.devops.gov.bc.ca/public/faviconCORE.ico](https://mds-test.apps.silver.devops.gov.bc.ca/public/faviconCORE.ico)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt)
- ..

View the [following link](https://github.com/bcgov/mds/actions/runs/16814011300) to download the report.
RunnerID:16814011300

Start with the downloadable ZAP baseline report from GitHub Actions run 16814011300 and review the findings against the listed test-site URLs. The report names CSP, SRI, cookie, site-isolation, disclosure, and cache-related alerts but no source files or tests. Done is not defined; the required remediation scope needs maintainer clarification.

Written by the indexing model from the issue text.