ZAP Scan Baseline Report

- Site: [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **CSP: Failure to Define Directive with No Fallback** [10055] total: 2:
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **CSP: Wildcard Directive** [10055] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **CSP: script-src unsafe-eval** [10055] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **CSP: style-src unsafe-inline** [10055] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Cookie with SameSite Attribute None** [10054] total: 1:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- **Insufficient Site Isolation Against Spectre Vulnerability** [90004] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Private IP Disclosure** [2] total: 1:
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js)
- **Timestamp Disclosure - Unix** [10096] total: 88:
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 4:
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.29d8fa8f.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.29d8fa8f.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.58e217d3.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.e3976a6d.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.e3976a6d.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.f13edb59.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.f13edb59.js)
- **Modern Web Application** [10109] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Re-examine Cache-control Directives** [10015] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Session Management Response Identified** [10112] total: 2:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- **Storable and Cacheable Content** [10049] total: 11:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.e3976a6d.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.e3976a6d.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.e72ba902.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.e72ba902.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.f13edb59.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.f13edb59.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/main.css](https://minespace-test.apps.silver.devops.gov.bc.ca/main.css)
- ..

View the [following link](https://github.com/bcgov/mds/actions/runs/16817655844) to download the report.
RunnerID:16817655844

Download the report from GitHub Actions run 16817655844 and review the listed alerts for the deployed Minespace site, including its response headers and JavaScript bundles. Determine which findings are actionable and what project entry points control them; the issue does not identify files, tests, or a requested remediation. Done should mean the agreed alerts are addressed and a follow-up ZAP baseline shows the resulting status.

Written by the indexing model from the issue text.