ZAP Scan Baseline Report

- Site: [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **CSP: Failure to Define Directive with No Fallback** [10055] total: 2:
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **CSP: Wildcard Directive** [10055] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **CSP: script-src unsafe-eval** [10055] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **CSP: style-src unsafe-inline** [10055] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Sub Resource Integrity Attribute Missing** [90003] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Cookie with SameSite Attribute None** [10054] total: 1:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- **Insufficient Site Isolation Against Spectre Vulnerability** [90004] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Private IP Disclosure** [2] total: 1:
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- **Timestamp Disclosure - Unix** [10096] total: 88:
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 4:
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.1b4d.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.1b4d.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.778b.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.778b.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.8269.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.aa48.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.aa48.js)
- **Modern Web Application** [10109] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Re-examine Cache-control Directives** [10015] total: 3:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://mds-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Session Management Response Identified** [10112] total: 2:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- **Storable and Cacheable Content** [10049] total: 11:
- [https://mds-test.apps.silver.devops.gov.bc.ca](https://mds-test.apps.silver.devops.gov.bc.ca)
- [https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.778b.js](https://mds-test.apps.silver.devops.gov.bc.ca/js/bundle.778b.js)
- [https://mds-test.apps.silver.devops.gov.bc.ca/main.css](https://mds-test.apps.silver.devops.gov.bc.ca/main.css)
- [https://mds-test.apps.silver.devops.gov.bc.ca/public/faviconCORE.ico](https://mds-test.apps.silver.devops.gov.bc.ca/public/faviconCORE.ico)
- [https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt](https://mds-test.apps.silver.devops.gov.bc.ca/robots.txt)
- ..

View the [following link](https://github.com/bcgov/mds/actions/runs/16817655838) to download the report.
RunnerID:16817655838

Start by downloading the ZAP report from GitHub Actions run 16817655838 and reviewing the findings for the deployed site, especially the JavaScript bundles and main.css named in the report. The issue does not identify which alerts to remediate or define acceptance criteria; completion would require agreed fixes followed by a clean or accepted rerun of the scan.

Written by the indexing model from the issue text.