The my-sample-api from brunobotelhobr

ZAP API Scan Report

Site: https://api-service-brunobotelhobr.cloud.okteto.net
New Alerts
- CSP: Wildcard Directive [10055] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net//unreadyfor/time
- Content Security Policy (CSP) Header Not Set [10038] total: 2:
  - https://api-service-brunobotelhobr.cloud.okteto.net/secret/secret
  - https://api-service-brunobotelhobr.cloud.okteto.net/stress/resource/time/1.2/interval/1.2/cycles/1.2
- A Server Error response code was returned by the server [100000] total: 74:
- Application Error Disclosure [90022] total: 2:
  - https://api-service-brunobotelhobr.cloud.okteto.net/secret/secret
  - https://api-service-brunobotelhobr.cloud.okteto.net/stress/resource/time/1.2/interval/1.2/cycles/1.2
- Permissions Policy Header Not Set [10063] total: 3:
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 10:
- Unexpected Content-Type was returned [100001] total: 64:
- X-Content-Type-Options Header Missing [10021] total: 7:
- A Client Error response code was returned by the server [100000] total: 2:
  - https://api-service-brunobotelhobr.cloud.okteto.net/secret/8670250598158162017
  - https://api-service-brunobotelhobr.cloud.okteto.net//unreadyfor/time
- Base64 Disclosure [10094] total: 3:
- Non-Storable Content [10049] total: 4:
- Re-examine Cache-control Directives [10015] total: 7:
- Storable and Cacheable Content [10049] total: 5:
- Storable but Non-Cacheable Content [10049] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml

View the following link to download the report.
RunnerID:1971082961

ZAP API Scan Report

Site: https://api-service-brunobotelhobr.cloud.okteto.net
New Alerts
- A Client Error response code was returned by the server [100000] total: 2:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml/
- Storable and Cacheable Content [10049] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml
Ignored Alerts
- CSP: Wildcard Directive [10055] total: 1:
- Permissions Policy Header Not Set [10063] total: 1:
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 1:
- Unexpected Content-Type was returned [100001] total: 14:

View the following link to download the report.
RunnerID:1970980933

ZAP API Scan Report

Site: https://api-service-brunobotelhobr.cloud.okteto.net
New Alerts
- A Client Error response code was returned by the server [100000] total: 2:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml/
- Storable and Cacheable Content [10049] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml
Ignored Alerts
- CSP: Wildcard Directive [10055] total: 1:
- Permissions Policy Header Not Set [10063] total: 1:
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 1:
- Unexpected Content-Type was returned [100001] total: 14:

View the following link to download the report.
RunnerID:1970979547

ZAP API Scan Report

Site: https://api-service-brunobotelhobr.cloud.okteto.net
New Alerts
- Base64 Disclosure [10094] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openpai.yaml
- Modern Web Application [10109] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openpai.yaml
- Re-examine Cache-control Directives [10015] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openpai.yaml
- Storable and Cacheable Content [10049] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openpai.yaml
Ignored Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 1:
- Missing Anti-clickjacking Header [10020] total: 1:
- Permissions Policy Header Not Set [10063] total: 1:
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 1:
- Unexpected Content-Type was returned [100001] total: 15:
- X-Content-Type-Options Header Missing [10021] total: 1:

View the following link to download the report.
RunnerID:1970871251

ZAP API Scan Report

Site: https://api-service-brunobotelhobr.cloud.okteto.net
New Alerts
- Base64 Disclosure [10094] total: 4:
- Non-Storable Content [10049] total: 4:
- Re-examine Cache-control Directives [10015] total: 8:
- Storable and Cacheable Content [10049] total: 5:
- Storable but Non-Cacheable Content [10049] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml
Ignored Alerts
- CSP: Wildcard Directive [10055] total: 1:
- Content Security Policy (CSP) Header Not Set [10038] total: 1:
- A Server Error response code was returned by the server [100000] total: 24:
- Permissions Policy Header Not Set [10063] total: 2:
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 10:
- Unexpected Content-Type was returned [100001] total: 39:
- X-Content-Type-Options Header Missing [10021] total: 8:
- A Client Error response code was returned by the server [100000] total: 6:

View the following link to download the report.
RunnerID:2861542085

ZAP API Scan Report

Site: https://api-service-brunobotelhobr.cloud.okteto.net
New Alerts
- CSP: Wildcard Directive [10055] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net//unreadyfor/time
- Content Security Policy (CSP) Header Not Set [10038] total: 2:
  - https://api-service-brunobotelhobr.cloud.okteto.net/echo/msg
  - https://api-service-brunobotelhobr.cloud.okteto.net/secret/secret
- A Server Error response code was returned by the server [100000] total: 41:
- Application Error Disclosure [90022] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/echo/msg
- Permissions Policy Header Not Set [10063] total: 3:
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 10:
- Unexpected Content-Type was returned [100001] total: 52:
- X-Content-Type-Options Header Missing [10021] total: 7:
- A Client Error response code was returned by the server [100000] total: 5:
- Base64 Disclosure [10094] total: 3:
- Non-Storable Content [10049] total: 5:
- Re-examine Cache-control Directives [10015] total: 7:
- Storable and Cacheable Content [10049] total: 4:
- Storable but Non-Cacheable Content [10049] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml

View the following link to download the report.
RunnerID:2638214873

ZAP API Scan Report

Site: https://api-service-brunobotelhobr.cloud.okteto.net
New Alerts
- CSP: Wildcard Directive [10055] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net//unreadyfor/time
- Content Security Policy (CSP) Header Not Set [10038] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/secret/secret
- Hidden File Found [40035] total: 3:
- A Server Error response code was returned by the server [100000] total: 67:
- Permissions Policy Header Not Set [10063] total: 2:
  - https://api-service-brunobotelhobr.cloud.okteto.net/secret/secret
  - https://api-service-brunobotelhobr.cloud.okteto.net//unreadyfor/time
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 10:
- Unexpected Content-Type was returned [100001] total: 92:
- X-Content-Type-Options Header Missing [10021] total: 8:
- A Client Error response code was returned by the server [100000] total: 8:
- Non-Storable Content [10049] total: 4:
- Re-examine Cache-control Directives [10015] total: 8:
- Storable and Cacheable Content [10049] total: 5:
- Storable but Non-Cacheable Content [10049] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml

View the following link to download the report.
RunnerID:4533873250

ZAP API Scan Report

Site: https://api-service-brunobotelhobr.cloud.okteto.net
New Alerts
- Base64 Disclosure [10094] total: 3:
- Non-Storable Content [10049] total: 5:
- Re-examine Cache-control Directives [10015] total: 7:
- Storable and Cacheable Content [10049] total: 4:
- Storable but Non-Cacheable Content [10049] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml
Ignored Alerts
- CSP: Wildcard Directive [10055] total: 1:
- Content Security Policy (CSP) Header Not Set [10038] total: 2:
- A Server Error response code was returned by the server [100000] total: 77:
- Application Error Disclosure [90022] total: 1:
- Permissions Policy Header Not Set [10063] total: 3:
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 10:
- Unexpected Content-Type was returned [100001] total: 71:
- X-Content-Type-Options Header Missing [10021] total: 7:
- A Client Error response code was returned by the server [100000] total: 3:

View the following link to download the report.
RunnerID:1999940704

ZAP API Scan Report

Site: https://api-service-brunobotelhobr.cloud.okteto.net
New Alerts
- A Client Error response code was returned by the server [100000] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml
- Storable and Cacheable Content [10049] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml
Ignored Alerts
- CSP: Wildcard Directive [10055] total: 1:
- Permissions Policy Header Not Set [10063] total: 1:
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 1:
- Unexpected Content-Type was returned [100001] total: 13:

View the following link to download the report.
RunnerID:1970984374

ZAP API Scan Report

Site: https://api-service-brunobotelhobr.cloud.okteto.net
New Alerts
- CSP: Wildcard Directive [10055] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net//unreadyfor/time
- Content Security Policy (CSP) Header Not Set [10038] total: 2:
  - https://api-service-brunobotelhobr.cloud.okteto.net/echo/msg
  - https://api-service-brunobotelhobr.cloud.okteto.net/secret/secret
- A Server Error response code was returned by the server [100000] total: 42:
- Application Error Disclosure [90022] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/echo/msg
- Permissions Policy Header Not Set [10063] total: 3:
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 10:
- Unexpected Content-Type was returned [100001] total: 52:
- X-Content-Type-Options Header Missing [10021] total: 7:
- A Client Error response code was returned by the server [100000] total: 5:
- Base64 Disclosure [10094] total: 3:
- Non-Storable Content [10049] total: 5:
- Re-examine Cache-control Directives [10015] total: 7:
- Storable and Cacheable Content [10049] total: 4:
- Storable but Non-Cacheable Content [10049] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml

View the following link to download the report.
RunnerID:2638325136

ZAP API Scan Report

Site: https://api-service-brunobotelhobr.cloud.okteto.net
New Alerts
- CSP: Wildcard Directive [10055] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml
- A Client Error response code was returned by the server [100000] total: 2:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml/
- Storable and Cacheable Content [10049] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml
Ignored Alerts
- Permissions Policy Header Not Set [10063] total: 1:
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 1:
- Unexpected Content-Type was returned [100001] total: 14:

View the following link to download the report.
RunnerID:1970887486

ZAP API Scan Report

Site: https://api-service-brunobotelhobr.cloud.okteto.net
New Alerts
- CSP: Wildcard Directive [10055] total: 2:
  - https://api-service-brunobotelhobr.cloud.okteto.net/docs
  - https://api-service-brunobotelhobr.cloud.okteto.net/login
- Content Security Policy (CSP) Header Not Set [10038] total: 3:
- Format String Error [30002] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/login
- Hidden File Found [40035] total: 4:
- Missing Anti-clickjacking Header [10020] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/docs/
- A Server Error response code was returned by the server [100000] total: 54:
- Application Error Disclosure [90022] total: 2:
  - https://api-service-brunobotelhobr.cloud.okteto.net/docs
  - https://api-service-brunobotelhobr.cloud.okteto.net/secret/secret
- Permissions Policy Header Not Set [10063] total: 4:
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 12:
- Unexpected Content-Type was returned [100001] total: 86:
- X-Content-Type-Options Header Missing [10021] total: 10:
- A Client Error response code was returned by the server [100000] total: 7:
- Modern Web Application [10109] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/docs/
- Non-Storable Content [10049] total: 5:
- Re-examine Cache-control Directives [10015] total: 10:
- Storable and Cacheable Content [10049] total: 7:
- Storable but Non-Cacheable Content [10049] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml

View the following link to download the report.
RunnerID:3691759542

ZAP API Scan Report

Site: https://api-service-brunobotelhobr.cloud.okteto.net
New Alerts
- A Client Error response code was returned by the server [100000] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml
- Storable and Cacheable Content [10049] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml
Ignored Alerts
- CSP: Wildcard Directive [10055] total: 1:
- Permissions Policy Header Not Set [10063] total: 1:
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 1:
- Unexpected Content-Type was returned [100001] total: 13:

View the following link to download the report.
RunnerID:1970978335

ZAP API Scan Report

Site: https://api-service-brunobotelhobr.cloud.okteto.net
New Alerts
- A Client Error response code was returned by the server [100000] total: 2:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml/
- Storable and Cacheable Content [10049] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml
Ignored Alerts
- CSP: Wildcard Directive [10055] total: 1:
- Permissions Policy Header Not Set [10063] total: 1:
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 1:
- Unexpected Content-Type was returned [100001] total: 14:

View the following link to download the report.
RunnerID:1971002587

ZAP API Scan Report

Site: https://api-service-brunobotelhobr.cloud.okteto.net
New Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openpai.yaml
- Missing Anti-clickjacking Header [10020] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openpai.yaml
- Permissions Policy Header Not Set [10063] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openpai.yaml
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openpai.yaml
- Unexpected Content-Type was returned [100001] total: 12:
- X-Content-Type-Options Header Missing [10021] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openpai.yaml
- Base64 Disclosure [10094] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openpai.yaml
- Modern Web Application [10109] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openpai.yaml
- Re-examine Cache-control Directives [10015] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openpai.yaml
- Storable and Cacheable Content [10049] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openpai.yaml

View the following link to download the report.
RunnerID:1970796907

ZAP API Scan Report

Site: https://api-service-brunobotelhobr.cloud.okteto.net
New Alerts
- Non-Storable Content [10049] total: 4:
- Re-examine Cache-control Directives [10015] total: 8:
- Storable and Cacheable Content [10049] total: 5:
- Storable but Non-Cacheable Content [10049] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml
- User Agent Fuzzer [10104] total: 117:
Ignored Alerts
- CSP: Wildcard Directive [10055] total: 1:
- Content Security Policy (CSP) Header Not Set [10038] total: 1:
- A Server Error response code was returned by the server [100000] total: 92:
- Permissions Policy Header Not Set [10063] total: 2:
- Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 10:
- Unexpected Content-Type was returned [100001] total: 126:
- X-Content-Type-Options Header Missing [10021] total: 8:
- A Client Error response code was returned by the server [100000] total: 32:

View the following link to download the report.
RunnerID:4611896771

ZAP API Scan Report

Site: https://api-service-brunobotelhobr.cloud.okteto.net
New Alerts
- Non-Storable Content [10049] total: 1:
  - https://api-service-brunobotelhobr.cloud.okteto.net/openapi.yaml
Ignored Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 1:
- A Server Error response code was returned by the server [100000] total: 2:
- Permissions Policy Header Not Set [10063] total: 1:
- Unexpected Content-Type was returned [100001] total: 13: