ZAP Scan Baseline Report

- Site: [https://wps-prod.apps.silver.devops.gov.bc.ca](https://wps-prod.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 3:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt](https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/sitemap.xml](https://wps-prod.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Missing Anti-clickjacking Header** [10020] total: 1:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- **Sub Resource Integrity Attribute Missing** [90003] total: 1:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- **Cookie with SameSite Attribute None** [10054] total: 2:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt](https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt)
- **In Page Banner Information Leak** [10009] total: 2:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt](https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/sitemap.xml](https://wps-prod.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Insufficient Site Isolation Against Spectre Vulnerability** [90004] total: 10:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-BL2GfK2w.css](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-BL2GfK2w.css)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/config.js](https://wps-prod.apps.silver.devops.gov.bc.ca/config.js)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/images/bcid-apple-icon.svg](https://wps-prod.apps.silver.devops.gov.bc.ca/images/bcid-apple-icon.svg)
- ..
- **Permissions Policy Header Not Set** [10063] total: 5:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DfrOALyI.js](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DfrOALyI.js)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/config.js](https://wps-prod.apps.silver.devops.gov.bc.ca/config.js)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt](https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/sitemap.xml](https://wps-prod.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Server Leaks Version Information via "Server" HTTP Response Header Field** [10036] total: 11:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-BL2GfK2w.css](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-BL2GfK2w.css)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DfrOALyI.js](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DfrOALyI.js)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/config.js](https://wps-prod.apps.silver.devops.gov.bc.ca/config.js)
- ..
- **Strict-Transport-Security Header Not Set** [10035] total: 11:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-BL2GfK2w.css](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-BL2GfK2w.css)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DfrOALyI.js](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DfrOALyI.js)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/config.js](https://wps-prod.apps.silver.devops.gov.bc.ca/config.js)
- ..
- **Timestamp Disclosure - Unix** [10096] total: 19:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DfrOALyI.js](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DfrOALyI.js)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DfrOALyI.js](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DfrOALyI.js)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DfrOALyI.js](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DfrOALyI.js)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DfrOALyI.js](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DfrOALyI.js)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DfrOALyI.js](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DfrOALyI.js)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 2:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DfrOALyI.js](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DfrOALyI.js)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- **Modern Web Application** [10109] total: 1:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- **Non-Storable Content** [10049] total: 1:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- **Re-examine Cache-control Directives** [10015] total: 3:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json)
- **Session Management Response Identified** [10112] total: 2:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt](https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt)
- **Storable and Cacheable Content** [10049] total: 11:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-BL2GfK2w.css](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-BL2GfK2w.css)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DfrOALyI.js](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DfrOALyI.js)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/config.js](https://wps-prod.apps.silver.devops.gov.bc.ca/config.js)
- ..

View the [following link](https://github.com/bcgov/wps/actions/runs/17522704543) to download the report.
RunnerID:17522704543

---
[ZAP by Checkmarx](https://checkmarx.com/)

Start by downloading the ZAP report from GitHub Actions run 17522704543 and review the listed production URLs and alert IDs. Trace each reported response header or disclosure to the repository entry point that serves the affected endpoint. Done means the applicable findings are remediated or explicitly assessed, then the baseline scan no longer reports unresolved actionable alerts.

Written by the indexing model from the issue text.