bcgov / bcgov/quickstart-openshift-demo
ZAP: Frontend
- Dominant language
- TypeScript
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
- Site: [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Sec-Fetch-Dest Header is Missing** [90005] total: 1:
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/)
- **Sec-Fetch-Mode Header is Missing** [90005] total: 1:
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/)
- **Sec-Fetch-Site Header is Missing** [90005] total: 1:
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/)
- **Sec-Fetch-User Header is Missing** [90005] total: 1:
- [https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-demo-test-frontend.apps.silver.devops.gov.bc.ca/)
View the [following link](https://github.com/bcgov/quickstart-openshift-demo/actions/runs/31254384808) to download the report.
RunnerID:31254384808
---
[ZAP by Checkmarx](https://checkmarx.com/)
Contributor guide
Research direction
Start with the linked ZAP by Checkmarx report from GitHub Actions run 31254384808 and inspect the frontend at the reported URL. Determine how to address the four missing Sec-Fetch headers, then rerun the ZAP scan and confirm those alerts no longer appear.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- frontend, security, web-dev
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 38/100