ZAP: backend

- Site: [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 4:
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca)
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/)
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Permissions Policy Header Not Set** [10063] total: 4:
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca)
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/)
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Strict-Transport-Security Header Not Set** [10035] total: 4:
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca)
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/)
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Non-Storable Content** [10049] total: 4:
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca)
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/)
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/robots.txt](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Sec-Fetch-Dest Header is Missing** [90005] total: 3:
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca)
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/)
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Sec-Fetch-Mode Header is Missing** [90005] total: 3:
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca)
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/)
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Sec-Fetch-Site Header is Missing** [90005] total: 3:
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca)
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/)
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Sec-Fetch-User Header is Missing** [90005] total: 3:
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca)
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/)
- [https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://nr-test-openshift-temp-test-backend.apps.silver.devops.gov.bc.ca/sitemap.xml)

View the [following link](https://github.com/bcgov/nr-test-openshift-temp/actions/runs/18243451718) to download the report.
RunnerID:18243451718

---
ZAP is supported by the [Crash Override Open Source Fellowship](https://crashoverride.com/?zap=act)

Start with the ZAP report from GitHub Actions run 18243451718 and inspect the backend responses at the listed test site URLs. Determine where the reported security headers are configured and verify the result by rerunning the ZAP scan; done means the listed alerts are resolved or intentionally addressed.

Written by the indexing model from the issue text.