ZAP: Frontend

- Site: [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 4:
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Permissions Policy Header Not Set** [10063] total: 4:
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Strict-Transport-Security Header Not Set** [10035] total: 4:
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Non-Storable Content** [10049] total: 4:
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Sec-Fetch-Dest Header is Missing** [90005] total: 3:
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- **Sec-Fetch-Mode Header is Missing** [90005] total: 3:
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- **Sec-Fetch-Site Header is Missing** [90005] total: 3:
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)
- **Sec-Fetch-User Header is Missing** [90005] total: 3:
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca)
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/)
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/robots.txt)

View the [following link](https://github.com/bcgov/quickstart-openshift-demo/actions/runs/28287990086) to download the report.
RunnerID:28287990086

---
[ZAP by Checkmarx](https://checkmarx.com/)

Start by downloading the ZAP report from the linked GitHub Actions run and review the listed findings for the frontend URL and its robots.txt and sitemap.xml responses. Identify where those responses are configured, then rerun the scan and confirm the reported missing or unsafe headers no longer appear.

Written by the indexing model from the issue text.