ZAP: frontend

- Site: [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 4:
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Permissions Policy Header Not Set** [10063] total: 4:
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Strict-Transport-Security Header Not Set** [10035] total: 4:
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Non-Storable Content** [10049] total: 4:
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Sec-Fetch-Dest Header is Missing** [90005] total: 4:
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Sec-Fetch-Mode Header is Missing** [90005] total: 4:
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Sec-Fetch-Site Header is Missing** [90005] total: 4:
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Sec-Fetch-User Header is Missing** [90005] total: 4:
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)

View the [following link](https://github.com/bcgov/nr-test-openshift-temp/actions/runs/24929624530) to download the report.
RunnerID:24929624530

---
ZAP is supported by the [Crash Override Open Source Fellowship](https://crashoverride.com/?zap=act)

Start with the linked ZAP report and the frontend site's responses for the listed alerts. Review the GitHub Actions run that produced RunnerID 24929624530 to locate the relevant frontend or deployment entry point. Done means the reported headers and content issue are resolved and a fresh ZAP scan no longer reports them.

Written by the indexing model from the issue text.