ZAP Security Report

- Site: [https://nr-fta-test.apps.silver.devops.gov.bc.ca](https://nr-fta-test.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 4:
- [https://nr-fta-test.apps.silver.devops.gov.bc.ca](https://nr-fta-test.apps.silver.devops.gov.bc.ca)
- [https://nr-fta-test.apps.silver.devops.gov.bc.ca/](https://nr-fta-test.apps.silver.devops.gov.bc.ca/)
- [https://nr-fta-test.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-fta-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-fta-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-fta-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Permissions Policy Header Not Set** [10063] total: 4:
- [https://nr-fta-test.apps.silver.devops.gov.bc.ca](https://nr-fta-test.apps.silver.devops.gov.bc.ca)
- [https://nr-fta-test.apps.silver.devops.gov.bc.ca/](https://nr-fta-test.apps.silver.devops.gov.bc.ca/)
- [https://nr-fta-test.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-fta-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-fta-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-fta-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Strict-Transport-Security Header Not Set** [10035] total: 4:
- [https://nr-fta-test.apps.silver.devops.gov.bc.ca](https://nr-fta-test.apps.silver.devops.gov.bc.ca)
- [https://nr-fta-test.apps.silver.devops.gov.bc.ca/](https://nr-fta-test.apps.silver.devops.gov.bc.ca/)
- [https://nr-fta-test.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-fta-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-fta-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-fta-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Non-Storable Content** [10049] total: 4:
- [https://nr-fta-test.apps.silver.devops.gov.bc.ca](https://nr-fta-test.apps.silver.devops.gov.bc.ca)
- [https://nr-fta-test.apps.silver.devops.gov.bc.ca/](https://nr-fta-test.apps.silver.devops.gov.bc.ca/)
- [https://nr-fta-test.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-fta-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-fta-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-fta-test.apps.silver.devops.gov.bc.ca/sitemap.xml)

View the [following link](https://github.com/bcgov/nr-fta/actions/runs/32569300211) to download the report.
RunnerID:32569300211

---
[ZAP by Checkmarx](https://checkmarx.com/)

Download the ZAP report from the linked GitHub Actions run and review the four reported header findings against the listed deployed URLs. Trace each URL to the repository entry point that serves it; done means the report no longer flags the listed missing or unsafe response headers.

Written by the indexing model from the issue text.