ZAP Scan Baseline Report

- Site: [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **CSP: Failure to Define Directive with No Fallback** [10055] total: 2:
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **CSP: Wildcard Directive** [10055] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **CSP: script-src unsafe-eval** [10055] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **CSP: style-src unsafe-inline** [10055] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Cookie with SameSite Attribute None** [10054] total: 2:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt)
- **Insufficient Site Isolation Against Spectre Vulnerability** [90004] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Private IP Disclosure** [2] total: 1:
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js)
- **Timestamp Disclosure - Unix** [10096] total: 88:
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 4:
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.29d8fa8f.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.29d8fa8f.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.e3976a6d.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.e3976a6d.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.f13edb59.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.f13edb59.js)
- **Modern Web Application** [10109] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Re-examine Cache-control Directives** [10015] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Session Management Response Identified** [10112] total: 2:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt)
- **Storable and Cacheable Content** [10049] total: 11:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.e3976a6d.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.e3976a6d.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.e72ba902.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.e72ba902.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/main.css](https://minespace-test.apps.silver.devops.gov.bc.ca/main.css)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/public/faviconMS.ico](https://minespace-test.apps.silver.devops.gov.bc.ca/public/faviconMS.ico)
- ..

View the [following link](https://github.com/bcgov/mds/actions/runs/16817504134) to download the report.
RunnerID:16817504134

Start with the linked GitHub Actions run and download the ZAP baseline report. Review the listed alerts against the deployed test site, including robots.txt, sitemap.xml, the bundle JavaScript files, and main.css, then identify the relevant application or deployment configuration. Done means the findings are triaged and remediation is defined or verified in a follow-up scan.

Written by the indexing model from the issue text.