ZAP Scan Baseline Report

- Site: [https://wps-prod.apps.silver.devops.gov.bc.ca](https://wps-prod.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **Content Security Policy (CSP) Header Not Set** [10038] total: 3:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt](https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/sitemap.xml](https://wps-prod.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Missing Anti-clickjacking Header** [10020] total: 1:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- **Sub Resource Integrity Attribute Missing** [90003] total: 1:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- **Cookie with SameSite Attribute None** [10054] total: 2:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt](https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt)
- **Cross-Origin-Embedder-Policy Header Missing or Invalid** [90004] total: 1:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- **Cross-Origin-Opener-Policy Header Missing or Invalid** [90004] total: 1:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- **Cross-Origin-Resource-Policy Header Missing or Invalid** [90004] total: 5:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/images/bcid-apple-icon.svg](https://wps-prod.apps.silver.devops.gov.bc.ca/images/bcid-apple-icon.svg)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/images/bcid-apple-touch-icon.png](https://wps-prod.apps.silver.devops.gov.bc.ca/images/bcid-apple-touch-icon.png)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/images/bcid-favicon-32x32.png](https://wps-prod.apps.silver.devops.gov.bc.ca/images/bcid-favicon-32x32.png)
- **In Page Banner Information Leak** [10009] total: 2:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt](https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/sitemap.xml](https://wps-prod.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Permissions Policy Header Not Set** [10063] total: 5:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DbfgpEXe.js](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DbfgpEXe.js)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/config.js](https://wps-prod.apps.silver.devops.gov.bc.ca/config.js)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt](https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/sitemap.xml](https://wps-prod.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Server Leaks Version Information via "Server" HTTP Response Header Field** [10036] total: 5:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/images/bcid-apple-icon.svg](https://wps-prod.apps.silver.devops.gov.bc.ca/images/bcid-apple-icon.svg)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt](https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/sitemap.xml](https://wps-prod.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Strict-Transport-Security Header Not Set** [10035] total: 5:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/images/bcid-apple-icon.svg](https://wps-prod.apps.silver.devops.gov.bc.ca/images/bcid-apple-icon.svg)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt](https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/sitemap.xml](https://wps-prod.apps.silver.devops.gov.bc.ca/sitemap.xml)
- **Timestamp Disclosure - Unix** [10096] total: 5:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DbfgpEXe.js](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DbfgpEXe.js)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DbfgpEXe.js](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DbfgpEXe.js)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DbfgpEXe.js](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DbfgpEXe.js)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DbfgpEXe.js](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DbfgpEXe.js)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DbfgpEXe.js](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/index-DbfgpEXe.js)
- **Information Disclosure - Suspicious Comments** [10027] total: 1:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- **Modern Web Application** [10109] total: 1:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- **Non-Storable Content** [10049] total: 1:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- **Re-examine Cache-control Directives** [10015] total: 3:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json)
- **Session Management Response Identified** [10112] total: 3:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt](https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt](https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt)
- **Storable and Cacheable Content** [10049] total: 5:
- [https://wps-prod.apps.silver.devops.gov.bc.ca/](https://wps-prod.apps.silver.devops.gov.bc.ca/)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json](https://wps-prod.apps.silver.devops.gov.bc.ca/assets/manifest-tLRyCiZd.json)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/images/bcid-apple-icon.svg](https://wps-prod.apps.silver.devops.gov.bc.ca/images/bcid-apple-icon.svg)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt](https://wps-prod.apps.silver.devops.gov.bc.ca/robots.txt)
- [https://wps-prod.apps.silver.devops.gov.bc.ca/sitemap.xml](https://wps-prod.apps.silver.devops.gov.bc.ca/sitemap.xml)

View the [following link](https://github.com/bcgov/wps/actions/runs/31922012185) to download the report.
RunnerID:31922012185

---
[ZAP by Checkmarx](https://checkmarx.com/)

Download the ZAP report from GitHub Actions run 31922012185 and compare its findings with the deployed site at wps-prod.apps.silver.devops.gov.bc.ca. No repository files or configuration entry points are named, so first locate the deployment and response-header configuration. Done means the applicable findings are addressed or intentionally reviewed and the baseline scan is rerun.

Written by the indexing model from the issue text.