ZAP Security Report

- Site: [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **CSP: style-src unsafe-inline** [10055] total: 4:
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca)
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/)
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/robots.txt](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Proxy Disclosure** [40025] total: 5:
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca)
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/)
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/assets](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/assets)
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/assets/index-BsKj-Asy.css](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/assets/index-BsKj-Asy.css)
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/assets/index-CpeRO_Ap.js](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/assets/index-CpeRO_Ap.js)
- **Cookie with SameSite Attribute None** [10054] total: 2:
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca)
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/)
- **Cross-Origin-Embedder-Policy Header Missing or Invalid** [90004] total: 4:
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca)
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/)
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/robots.txt](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Cookie Slack Detector** [90027] total: 5:
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca)
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/)
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/assets](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/assets)
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/assets/index-BsKj-Asy.css](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/assets/index-BsKj-Asy.css)
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Modern Web Application** [10109] total: 4:
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca)
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/)
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/robots.txt](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Non-Storable Content** [10049] total: 5:
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca)
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/)
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/favicon.ico](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/favicon.ico)
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/robots.txt](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/sitemap.xml](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Session Management Response Identified** [10112] total: 3:
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca)
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca/)
- [https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca](https://quickstart-openshift-test.apps.silver.devops.gov.bc.ca)

View the [following link](https://github.com/bcgov/quickstart-openshift/actions/runs/31881059494) to download the report.
RunnerID:31881059494

---
[ZAP by Checkmarx](https://checkmarx.com/)

Download the ZAP report from the linked GitHub Actions run and review the listed alerts against the deployed application responses. Trace each finding to the relevant application or deployment configuration, and consider the work done when the applicable alerts are resolved or explicitly assessed.

Written by the indexing model from the issue text.