ZAP Scan Baseline Report

[github-actions]

• Site: https://api.github.com
  New Alerts
  • Cross-Domain Misconfiguration [10098] total: 10:
    • https://api.github.com/
    • https://api.github.com/authorizations
    • https://api.github.com/repos
    • https://api.github.com/repos/db-ui
    • https://api.github.com/repos/db-ui/cicd-playground
    • ..
  • Sub Resource Integrity Attribute Missing [90003] total: 1:
    • https://api.github.com/repos/db-ui/cicd-playground/commits/95e42571dcdd58aad6aff1f2999a3bb2d4e0d042
  • Insufficient Site Isolation Against Spectre Vulnerability [90004] total: 1:
    • https://api.github.com/robots.txt
  • Permissions Policy Header Not Set [10063] total: 2:
    • https://api.github.com/repos/db-ui/cicd-playground/contents/review%2Fout%2Fassets%2Findex-ab516c3e.js?ref=04455a1c0c6d2574b0931ab61b552cfa794c443e
    • https://api.github.com/repos/db-ui/cicd-playground/contents/scripts%2Fcleanup-gh-pages.js?ref=8f8f5ea52e9474c250e6731c738669c104a5b05c
  • Strict-Transport-Security Header Not Set [10035] total: 2:
    • https://api.github.com/rate_limit
    • https://api.github.com/robots.txt
  • Timestamp Disclosure - Unix [10096] total: 6:
    • https://api.github.com/repos/db-ui/cicd-playground/commits/1021dbf04282d166a51b74e736c42010e76738ea
    • https://api.github.com/repos/db-ui/cicd-playground/commits/24c06a8cfc78ff3a0f837d9c7e1f73cbad6f4af7
    • https://api.github.com/repos/db-ui/cicd-playground/commits/5fe314d52fe76869e712baf8f6fe299e0932ff10
    • https://api.github.com/repos/db-ui/cicd-playground/commits/a715418dbaac586b88eda1589e8fa6498837efe8
    • https://api.github.com/repos/db-ui/cicd-playground/commits/d5a20ecb903d00c1522612ddbd8430ffef1dc0b9
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 1:
    • https://api.github.com/robots.txt
  • Non-Storable Content [10049] total: 2:
    • https://api.github.com/search/commits?q
    • https://api.github.com/user
  • Re-examine Cache-control Directives [10015] total: 9:
    • https://api.github.com/
    • https://api.github.com/feeds
    • https://api.github.com/repos/db-ui/cicd-playground
    • https://api.github.com/repos/db-ui/cicd-playground/branches
    • https://api.github.com/users/db-ui
    • ..
  • Storable and Cacheable Content [10049] total: 8:
    • https://api.github.com/
    • https://api.github.com/authorizations
    • https://api.github.com/repos
    • https://api.github.com/repos/db-ui
    • https://api.github.com/repos/db-ui/cicd-playground
    • ..

View the following link to download the report.
RunnerID:13650428511

---

ZAP by Checkmarx

[github-actions]

• Site: https://api.github.com
  New Alerts

  • CSP: Wildcard Directive [10055] total: 12:
    • https://api.github.com/repos/db-ui/cicd-playground/tarball/refs/tags/v0.0.26
    • https://api.github.com/repos/db-ui/cicd-playground/tarball/refs/tags/v0.0.27
    • https://api.github.com/repos/db-ui/cicd-playground/tarball/refs/tags/v0.0.28
    • https://api.github.com/repos/db-ui/cicd-playground/tarball/refs/tags/v0.0.29
    • https://api.github.com/repos/db-ui/cicd-playground/tarball/refs/tags/v0.0.30
    • ..

  Resolved Alerts

  • Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report.
RunnerID:13755501886

[github-actions]

• Site: https://api.github.com
  New Alerts
  • Sub Resource Integrity Attribute Missing [90003] total: 1:
    • https://api.github.com/repos/db-ui/cicd-playground/commits/95e42571dcdd58aad6aff1f2999a3bb2d4e0d042
  • Information Disclosure - Suspicious Comments [10027] total: 1:
    • https://api.github.com/events

View the following link to download the report.
RunnerID:13886304592

[github-actions]

• Site: https://api.github.com
  Resolved Alerts
  • Sub Resource Integrity Attribute Missing [90003] total: 1:

View the following link to download the report.
RunnerID:14021892956

[github-actions]

• Site: https://api.github.com
  New Alerts
  • Sub Resource Integrity Attribute Missing [90003] total: 1:
    • https://api.github.com/repos/db-ui/cicd-playground/commits/95e42571dcdd58aad6aff1f2999a3bb2d4e0d042

View the following link to download the report.
RunnerID:14025832605

[github-actions]

• Site: https://api.github.com
  Resolved Alerts
  • CSP: Wildcard Directive [10055] total: 12:
  • Information Disclosure - Suspicious Comments [10027] total: 2:

View the following link to download the report.
RunnerID:14092458143

[github-actions]

• Site: https://api.github.com
  New Alerts
  • CSP: Failure to Define Directive with No Fallback [10055] total: 2:
    • https://api.github.com/repos/javadbat/jb-date-input/tarball/v5.6.0
    • https://api.github.com/repos/javadbat/jb-date-input/zipball/v5.6.0
  • Source Code Disclosure - Python [10099] total: 1:
    • https://api.github.com/events

View the following link to download the report.
RunnerID:14092901004

[github-actions]

• Site: https://api.github.com
  New Alerts

  • Information Disclosure - Suspicious Comments [10027] total: 1:
    • https://api.github.com/events

  Resolved Alerts

  • CSP: Failure to Define Directive with No Fallback [10055] total: 2:
  • Source Code Disclosure - Python [10099] total: 1:

View the following link to download the report.
RunnerID:14162005260

[github-actions]

• Site: https://api.github.com
  Resolved Alerts
  • Information Disclosure - Suspicious Comments [10027] total: 1:

View the following link to download the report.
RunnerID:14188322950

[github-actions]

• Site: https://api.github.com
  New Alerts
  • Information Disclosure - Suspicious Comments [10027] total: 2:
    • https://api.github.com/events
    • https://api.github.com/events

View the following link to download the report.
RunnerID:14188388607

[github-actions]

• Site: https://api.github.com
  Resolved Alerts
  • Information Disclosure - Suspicious Comments [10027] total: 2:

View the following link to download the report.
RunnerID:14188423973

[github-actions]

• Site: https://api.github.com
  New Alerts
  • Information Disclosure - Suspicious Comments [10027] total: 1:
    • https://api.github.com/events

View the following link to download the report.
RunnerID:14298786136

[github-actions]

• Site: https://api.github.com
  Resolved Alerts
  • Information Disclosure - Suspicious Comments [10027] total: 1:

View the following link to download the report.
RunnerID:14562305931