ZAP: frontend

- Site: [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 4:
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Permissions Policy Header Not Set** [10063] total: 4:
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Strict-Transport-Security Header Not Set** [10035] total: 4:
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Non-Storable Content** [10049] total: 4:
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Sec-Fetch-Dest Header is Missing** [90005] total: 4:
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Sec-Fetch-Mode Header is Missing** [90005] total: 4:
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Sec-Fetch-Site Header is Missing** [90005] total: 4:
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Sec-Fetch-User Header is Missing** [90005] total: 4:
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-test-openshift-temp-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)

View the [following link](https://github.com/bcgov/nr-test-openshift-temp/actions/runs/28287866107) to download the report.
RunnerID:28287866107

---
ZAP is supported by the [Crash Override Open Source Fellowship](https://crashoverride.com/?zap=act)

Start with the ZAP report linked from the GitHub Actions run and inspect the frontend deployment entry point serving the listed URL; the issue names no source files or tests. Done means rerunning the scan and confirming the reported missing headers are addressed or intentionally assessed.

Written by the indexing model from the issue text.