ZAP Scan Baseline Report

[github-actions]

• Site: https://nodenv.github.io
  New Alerts
  • Reverse Tabnabbing [10108] total: 20:
    • https://nodenv.github.io/formulae/formula-linux/nodenv-default-npmrc
    • https://nodenv.github.io/formulae/formula/nodenv-aliases
    • https://nodenv.github.io/formulae/formula/nodenv-default-packages
    • https://nodenv.github.io/formulae/formula/nodenv-default-npmrc
    • https://nodenv.github.io/formulae/formula/jetbrains-npm
    • ..
  • Strict-Transport-Security Header Not Set [10035] total: 20:
    • https://nodenv.github.io/formulae/formula-linux/jetbrains-npm
    • https://nodenv.github.io/formulae/formula-linux/node-build-prerelease
    • https://nodenv.github.io/formulae/analytics/install-on-request/365d/
    • https://nodenv.github.io/formulae/formula/jetbrains-npm
    • https://nodenv.github.io/formulae/analytics/install/365d/
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 20:
    • https://nodenv.github.io/formulae/formula-linux/nodenv-aliases
    • https://nodenv.github.io/formulae/api/formula/jetbrains-npm.json
    • https://nodenv.github.io/formulae/analytics/install/90d/
    • https://nodenv.github.io/formulae/docs/api/
    • https://nodenv.github.io/formulae/api/formula/node-build-update-defs.json
    • ..
  • Cross-Domain Misconfiguration [10098] total: 20:
    • https://nodenv.github.io/formulae/assets/css/styles.css
    • https://nodenv.github.io/formulae/analytics-linux/build-error/30d/
    • https://nodenv.github.io/formulae/formula-linux/nodenv-default-packages
    • https://nodenv.github.io/formulae/api/formula-linux.json
    • https://nodenv.github.io/formulae/api/analytics-linux/install/365d.json
    • ..
  • Retrieved from Cache [10050] total: 20:
    • https://nodenv.github.io/formulae/api/formula-linux/nodenv-man.json
    • https://nodenv.github.io/robots.txt
    • https://nodenv.github.io/formulae/api/analytics/cask-install/90d.json
    • https://nodenv.github.io/formulae/analytics-npm/download/90d/
    • https://nodenv.github.io/formulae/api/analytics/cask-install/30d.json
    • ..
  • Timestamp Disclosure - Unix [10096] total: 20:
    • https://nodenv.github.io/formulae/formula/nodenv-default-npmrc
    • https://nodenv.github.io/formulae/cask/
    • https://nodenv.github.io/formulae/formula/nodenv-man
    • https://nodenv.github.io/formulae/analytics/build-error/30d/
    • https://nodenv.github.io/formulae/analytics/
    • ..
  • X-Frame-Options Header Not Set [10020] total: 20:
    • https://nodenv.github.io/formulae/analytics/install-on-request/30d/
    • https://nodenv.github.io/formulae/formula-linux/nodenv-aliases
    • https://nodenv.github.io/formulae/analytics/install/90d/
    • https://nodenv.github.io/formulae/docs/api/
    • https://nodenv.github.io/formulae/analytics-linux/install/30d/
    • ..
  • Incomplete or No Cache-control and Pragma HTTP Header Set [10015] total: 20:
    • https://nodenv.github.io/formulae/api/analytics-linux/build-error/365d.json
    • https://nodenv.github.io/formulae/analytics-linux/install-on-request/90d/
    • https://nodenv.github.io/formulae/api/formula/nodenv-update.json
    • https://nodenv.github.io/formulae/api/formula/nodenv-npm-migrate.json
    • https://nodenv.github.io/formulae/api/formula/node-build-prerelease.json
    • ..
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 20:
    • https://nodenv.github.io/formulae/analytics-linux/install-on-request/90d/
    • https://nodenv.github.io/formulae/analytics-linux/install-on-request/365d/
    • https://nodenv.github.io/formulae/analytics-npm/download/30d/
    • https://nodenv.github.io/formulae/analytics/install-on-request/90d/
    • https://nodenv.github.io/formulae/formula/nodenv-default-packages
    • ..
  • Content Security Policy (CSP) Header Not Set [10038] total: 20:
    • https://nodenv.github.io/formulae/analytics-linux/install-on-request/90d/
    • https://nodenv.github.io/formulae/analytics/build-error/365d/
    • https://nodenv.github.io/formulae/analytics-linux/build-error/90d/
    • https://nodenv.github.io/formulae/analytics-linux/install-on-request/365d/
    • https://nodenv.github.io/formulae/docs/api/
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 20:
    • https://nodenv.github.io/formulae/formula-linux/
    • https://nodenv.github.io/formulae/formula/
    • https://nodenv.github.io/formulae/analytics-linux/build-error/365d/
    • https://nodenv.github.io/formulae/analytics-linux/install-on-request/30d/
    • https://nodenv.github.io/formulae/analytics/install/365d/
    • ..
  • CSP Scanner: Wildcard Directive [10055] total: 7:
    • https://nodenv.github.io/formulae/api/analytics-npm/download/365d.json
    • https://nodenv.github.io/formulae/api/analytics-npm/download/30d.json
    • https://nodenv.github.io/formulae/api/analytics-npm/download/90d.json
    • https://nodenv.github.io/sitemap.xml
    • https://nodenv.github.io
    • ..
  • CSP Scanner: style-src unsafe-inline [10055] total: 7:
    • https://nodenv.github.io/
    • https://nodenv.github.io
    • https://nodenv.github.io/formulae/api/analytics-npm/download/30d.json
    • https://nodenv.github.io/formulae/api/analytics-npm/download/365d.json
    • https://nodenv.github.io/robots.txt
    • ..

View the following link to download the report.
RunnerID:89424294