ZAP Scan Baseline Report

- Site: [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **CSP: Failure to Define Directive with No Fallback** [10055] total: 2:
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **CSP: Wildcard Directive** [10055] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **CSP: script-src unsafe-eval** [10055] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **CSP: style-src unsafe-inline** [10055] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Sub Resource Integrity Attribute Missing** [90003] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Cookie with SameSite Attribute None** [10054] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Insufficient Site Isolation Against Spectre Vulnerability** [90004] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Private IP Disclosure** [2] total: 1:
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- **Timestamp Disclosure - Unix** [10096] total: 88:
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 4:
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.1b4d.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.1b4d.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.778b.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.778b.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.aa48.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.aa48.js)
- **Modern Web Application** [10109] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Re-examine Cache-control Directives** [10015] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Session Management Response Identified** [10112] total: 2:
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Storable and Cacheable Content** [10049] total: 11:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.778b.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.778b.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/main.css](https://mds-test.apps.silver.devops.gov.bc.ca/main.css)
- [https://mds-test.apps.silver.devops.gov.bc.ca/public/faviconCORE.ico](https://mds-test.apps.silver.devops.gov.bc.ca/public/faviconCORE.ico)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt)
- ..

View the [following link](https://github.com/bcgov/mds/actions/runs/16817504005) to download the report.
RunnerID:16817504005

Start with the linked GitHub Actions run and download the ZAP baseline report. Review the deployed site URLs and the mentioned assets, including js/bundle.8269.js, js/bundle.1b4d.js, js/bundle.778b.js, js/bundle.aa48.js, and main.css. The issue does not define which alerts to address or what completion should look like.

Written by the indexing model from the issue text.