bcgov / bcgov/nr-nodejs-vault-agent-openshift
ZAP Security Report
- Dominant language
- TypeScript
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
- Site: [https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca](https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 4:
- [https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca](https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca)
- [https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca/](https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca/)
- [https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Permissions Policy Header Not Set** [10063] total: 4:
- [https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca](https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca)
- [https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca/](https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca/)
- [https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Strict-Transport-Security Header Not Set** [10035] total: 4:
- [https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca](https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca)
- [https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca/](https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca/)
- [https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Non-Storable Content** [10049] total: 4:
- [https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca](https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca)
- [https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca/](https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca/)
- [https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-nodejs-vault-agent-openshift-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
View the [following link](https://github.com/bcgov/nr-nodejs-vault-agent-openshift/actions/runs/33249609762) to download the report.
RunnerID:33249609762
---
[ZAP by Checkmarx](https://checkmarx.com/)
Contributor guide
Research direction
Start by downloading the ZAP report from the linked GitHub Actions run and inspect the deployed service at the listed URL. Determine which project entry point controls the response headers, then verify that the CSP, Permissions-Policy, and Strict-Transport-Security findings are resolved for the application and its listed resources.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Active
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100