wordpress security header not working with nitropack

I am adding security header to my WordPress website, but nitro pack cache all i can see just few I have tried following ways can anyone guide me how to do that I want to do program way as I have no server access

function shp_send_hsts_header() {
  header( 'Strict-Transport-Security: max-age=31536000; includeSubDomains; preload' );
  header("Content-Security-Policy-Report-Only: <your directives>");
  header('X-Frame-Options: SAMEORIGIN');
 header('Referrer-Policy: no-referrer; strict-origin-when-cross-origin');
 header('Content-Security-Policy: upgrade-insecure-requests');
 header('Permissions-Policy: geolocation=self');
 header('X-Content-Type-Options:nosniff');
 header("Clear-Site-Data: none");
 header("Cross-Origin-Embedder-Policy: require-corp");
 header("Cross-Origin-Resource-Policy: same-site | same-origin | cross-origin");
 header("Cross-Origin-Opener-Policy: same-origin");
 header("X-Permitted-Cross-Domain-Policies: none");
}

add_action( 'send_headers', 'shp_send_hsts_header' );



add_filter( 'wp_headers', 'pagely_security_headers' );
function pagely_security_headers( $headers ) {
    $headers['X-XSS-Protection'] = '1; mode=block';
    $headers['X-Content-Type-Options'] = 'nosniff';
    $headers['X-Content-Security-Policy'] = 'default-src \'self\'; script-src \'self\';';
    $headers['X-Permitted-Cross-Domain-Policies'] = 'none'; 
    $headers['Clear-Site-Data'] = 'none';
    $headers['Cross-Origin-Embedder-Policy'] = 'require-corp';
    $headers['Cross-Origin-Resource-Policy'] = 'same-site | same-origin | cross-origin';
    $headers['Cross-Origin-Opener-Policy'] = 'same-origin';
    $headers['cache-control'] = 'maxage=31536000';
    return $headers;
}

after few minutes I get this result at first it shows all green then few minutes I get few missing result as shown in image please help me I am new and stuck in this from 4 days i don't know how to get that with nitropack. I am getting my website scanned for secure header from geekflare