ZAP Scan Baseline Report

- Site: [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **CSP: Failure to Define Directive with No Fallback** [10055] total: 2:
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **CSP: Wildcard Directive** [10055] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **CSP: script-src unsafe-eval** [10055] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **CSP: style-src unsafe-inline** [10055] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Cookie with SameSite Attribute None** [10054] total: 1:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- **Cross-Origin-Embedder-Policy Header Missing or Invalid** [90004] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Private IP Disclosure** [2] total: 1:
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js)
- **Timestamp Disclosure - Unix** [10096] total: 5:
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.57d87f79.js)
- **Information Disclosure - Suspicious Comments** [10027] total: 1:
- [https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.01267765.js](https://minespace-test.apps.silver.devops.gov.bc.ca/js/bundle.01267765.js)
- **Modern Web Application** [10109] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Re-examine Cache-control Directives** [10015] total: 3:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt/)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml/)
- **Session Management Response Identified** [10112] total: 2:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- **Storable and Cacheable Content** [10049] total: 5:
- [https://minespace-test.apps.silver.devops.gov.bc.ca](https://minespace-test.apps.silver.devops.gov.bc.ca)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/public/faviconMS.ico](https://minespace-test.apps.silver.devops.gov.bc.ca/public/faviconMS.ico)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt](https://minespace-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://minespace-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- [https://minespace-test.apps.silver.devops.gov.bc.ca/style/main.0f5c1435.css](https://minespace-test.apps.silver.devops.gov.bc.ca/style/main.0f5c1435.css)

View the [following link](https://github.com/bcgov/mds/actions/runs/23334649486) to download the report.
RunnerID:23334649486

---
[ZAP by Checkmarx](https://checkmarx.com/)

Start with the linked GitHub Actions run and its downloadable ZAP baseline report, then inspect the listed site endpoints and assets, including robots.txt, sitemap.xml, the JavaScript bundles, faviconMS.ico, and main.css. The issue does not define which alerts should change or what completion means, so establish the intended scope and rerun the baseline scan to verify the agreed findings.

Written by the indexing model from the issue text.