ZAP Scan Baseline Report

[github-actions[bot]]

• Site: https://daps-pen.int.demo.catena-x.net New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 1:
    • https://daps-pen.int.demo.catena-x.net
  • Cookie without SameSite Attribute [10054] total: 1:
    • https://daps-pen.int.demo.catena-x.net
  • Permissions Policy Header Not Set [10063] total: 3:
    • https://daps-pen.int.demo.catena-x.net
    • https://daps-pen.int.demo.catena-x.net/robots.txt
    • https://daps-pen.int.demo.catena-x.net/sitemap.xml
  • Non-Storable Content [10049] total: 4:
    • https://daps-pen.int.demo.catena-x.net
    • https://daps-pen.int.demo.catena-x.net/sinatra/404.png
    • https://daps-pen.int.demo.catena-x.net/robots.txt
    • https://daps-pen.int.demo.catena-x.net/sitemap.xml

View the following link to download the report. RunnerID:5078162695

[github-actions[bot]]

• Site: https://github.com New Alerts
  • Absence of Anti-CSRF Tokens [10202] total: 11:
    • https://github.com/
    • https://github.com/
    • https://github.com/*/forks
    • https://github.com/*/forks
    • https://github.com/*/pulse
    • ..
  • Application Error Disclosure [90022] total: 1:
    • https://github.com/trending
  • CSP: style-src unsafe-inline [10055] total: 10:
    • https://github.com/
    • https://github.com/*/download
    • https://github.com/*/forks
    • https://github.com/*/pulse
    • https://github.com/*/revisions
    • ..
  • Sub Resource Integrity Attribute Missing [90003] total: 112:
    • https://github.com/
    • https://github.com/
    • https://github.com/
    • https://github.com/
    • https://github.com/
    • ..
  • Cookie No HttpOnly Flag [10010] total: 5:
    • https://github.com/
    • https://github.com/eclipse-tractusx
    • https://github.com/eclipse-tractusx/managed-identity-wallets-archived
    • https://github.com/robots.txt
    • https://github.com/sitemap.xml
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 38:
    • https://github.com/
    • https://github.com/
    • https://github.com/
    • https://github.com/
    • https://github.com/
    • ..
  • Permissions Policy Header Not Set [10063] total: 11:
    • https://github.com/
    • https://github.com/*/download
    • https://github.com/*/forks
    • https://github.com/*/issues/new
    • https://github.com/*/issues/search
    • ..
  • Strict-Transport-Security Header Not Set [10035] total: 3:
    • https://github.com/fluidicon.png
    • https://github.com/opensearch.xml
    • https://github.com/robots.txt
  • Timestamp Disclosure - Unix [10096] total: 11:
    • https://github.com/
    • https://github.com/
    • https://github.com/
    • https://github.com/
    • https://github.com/*/pulse
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 3:
    • https://github.com/fluidicon.png
    • https://github.com/opensearch.xml
    • https://github.com/robots.txt
  • Information Disclosure - Suspicious Comments [10027] total: 10:
    • https://github.com/
    • https://github.com/*/download
    • https://github.com/*/forks
    • https://github.com/*/issues/new
    • https://github.com/*/pulse
    • ..
  • Modern Web Application [10109] total: 10:
    • https://github.com/
    • https://github.com/*/download
    • https://github.com/*/forks
    • https://github.com/*/issues/new
    • https://github.com/*/pulse
    • ..
  • Non-Storable Content [10049] total: 4:
    • https://github.com/
    • https://github.com/eclipse-tractusx
    • https://github.com/eclipse-tractusx/managed-identity-wallets-archived
    • https://github.com/sitemap.xml
  • Re-examine Cache-control Directives [10015] total: 10:
    • https://github.com/
    • https://github.com/account-login
    • https://github.com/eclipse-tractusx
    • https://github.com/eclipse-tractusx/managed-identity-wallets-archived
    • https://github.com/ekansa/Open-Context-Data
    • ..
  • Storable and Cacheable Content [10049] total: 1:
    • https://github.com/robots.txt
  • Storable but Non-Cacheable Content [10049] total: 5:
    • https://github.com/*/forks
    • https://github.com/*/pulse
    • https://github.com/*/stars
    • https://github.com/*/tree/
    • https://github.com/gist/
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 12:
    • https://github.com/customer-stories?type=enterprise
    • https://github.com/eclipse-tractusx/sldt-digital-twin-registry/issues?q=label%3A%22help+wanted%22+is%3Aissue+is%3Aopen
    • https://github.com/eclipse-tractusx/sldt-digital-twin-registry/issues?q=label%3A%22help+wanted%22+is%3Aissue+is%3Aopen
    • https://github.com/join?ref_cta=Sign+up+for+GitHub&ref_loc=homepage+sticky+nav&ref_page=%2F&source=homepage-sticky-nav
    • https://github.com/join?ref_cta=Sign+up+for+GitHub&ref_loc=homepage+sticky+nav&ref_page=%2F&source=homepage-sticky-nav
    • ..

View the following link to download the report. RunnerID:5487442771

[github-actions[bot]]

• Site: https://managed-identity-wallets.dev.demo.catena-x.net New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 2:
    • https://managed-identity-wallets.dev.demo.catena-x.net/
    • https://managed-identity-wallets.dev.demo.catena-x.net/docs
  • Sub Resource Integrity Attribute Missing [90003] total: 2:
    • https://managed-identity-wallets.dev.demo.catena-x.net/docs
    • https://managed-identity-wallets.dev.demo.catena-x.net/docs
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 1:
    • https://managed-identity-wallets.dev.demo.catena-x.net/docs
  • Permissions Policy Header Not Set [10063] total: 2:
    • https://managed-identity-wallets.dev.demo.catena-x.net/
    • https://managed-identity-wallets.dev.demo.catena-x.net/docs
  • X-Content-Type-Options Header Missing [10021] total: 2:
    • https://managed-identity-wallets.dev.demo.catena-x.net/
    • https://managed-identity-wallets.dev.demo.catena-x.net/docs
  • Modern Web Application [10109] total: 1:
    • https://managed-identity-wallets.dev.demo.catena-x.net/docs
  • Re-examine Cache-control Directives [10015] total: 2:
    • https://managed-identity-wallets.dev.demo.catena-x.net/
    • https://managed-identity-wallets.dev.demo.catena-x.net/docs
  • Storable and Cacheable Content [10049] total: 3:
    • https://managed-identity-wallets.dev.demo.catena-x.net/
    • https://managed-identity-wallets.dev.demo.catena-x.net/docs
    • https://managed-identity-wallets.dev.demo.catena-x.net/robots.txt

View the following link to download the report. RunnerID:5487670102