Streaming Services ZAP Scan

[github-actions]

• Site: https://api.epa.gov
  New Alerts

  • A Server Error response code was returned by the server [100000] total: 1:
    • https://api.epa.gov/easey/dev/streaming-services/emissions/apportioned/quarterly?stateCode=AL&facilityId=1.2&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&programCodeInfo=ARP&year=1.2&quarter=1.2&exclude=co2Rate
  • Application Error Disclosure [90022] total: 1:
    • https://api.epa.gov/easey/dev/streaming-services/emissions/apportioned/quarterly?stateCode=AL&facilityId=1.2&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&programCodeInfo=ARP&year=1.2&quarter=1.2&exclude=co2Rate
  • Information Disclosure - Debug Error Messages [10023] total: 1:
    • https://api.epa.gov/easey/dev/streaming-services/emissions/apportioned/quarterly?stateCode=AL&facilityId=1.2&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&programCodeInfo=ARP&year=1.2&quarter=1.2&exclude=co2Rate
  • Strict-Transport-Security Multiple Header Entries (Non-compliant with Spec) [10035] total: 12:
    • https://api.epa.gov/easey/dev/streaming-services/accounts/attributes?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&ownerOperator=ownerOperator&programCodeInfo=ARP&exclude=accountType
    • https://api.epa.gov/easey/dev/streaming-services/allowance-compliance?stateCode=AL&facilityId=1.2&ownerOperator=ownerOperator&programCodeInfo=ARP&year=1.2&exclude=allocated
    • https://api.epa.gov/easey/dev/streaming-services/allowance-holdings?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&vintageYear=1.2&ownerOperator=ownerOperator&programCodeInfo=ARP&exclude=epaRegion
    • https://api.epa.gov/easey/dev/streaming-services/allowance-transactions?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&programCodeInfo=ARP&ownerOperator=ownerOperator&transactionBeginDate=transactionBeginDate&transactionEndDate=transactionEndDate&transactionType=Activate%20Conditional%20Allowances&vintageYear=1.2&exclude=buyAccountType
    • https://api.epa.gov/easey/dev/streaming-services/emissions-compliance?stateCode=AL&facilityId=1.2&ownerOperator=ownerOperator&year=1.2&exclude=ownerOperator
    • ..
  • A Client Error response code was returned by the server [100000] total: 30:
    • https://api.epa.gov/easey/dev/streaming-services/accounts/attributes?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&ownerOperator=ownerOperator&programCodeInfo=ARP&exclude=accountType
    • https://api.epa.gov/easey/dev/streaming-services/allowance-compliance?stateCode=AL&facilityId=1.2&ownerOperator=ownerOperator&programCodeInfo=ARP&year=1.2&exclude=allocated
    • https://api.epa.gov/easey/dev/streaming-services/allowance-holdings?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&vintageYear=1.2&ownerOperator=ownerOperator&programCodeInfo=ARP&exclude=epaRegion
    • https://api.epa.gov/easey/dev/streaming-services/allowance-transactions?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&programCodeInfo=ARP&ownerOperator=ownerOperator&transactionBeginDate=transactionBeginDate&transactionEndDate=transactionEndDate&transactionType=Activate%20Conditional%20Allowances&vintageYear=1.2&exclude=buyAccountType
    • https://api.epa.gov/easey/dev/streaming-services/emissions-compliance?stateCode=AL&facilityId=1.2&ownerOperator=ownerOperator&year=1.2&exclude=ownerOperator
    • ..
  • Non-Storable Content [10049] total: 11:
    • https://api.epa.gov/easey/dev/streaming-services/accounts/attributes?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&ownerOperator=ownerOperator&programCodeInfo=ARP&exclude=accountType
    • https://api.epa.gov/easey/dev/streaming-services/allowance-compliance?stateCode=AL&facilityId=1.2&ownerOperator=ownerOperator&programCodeInfo=ARP&year=1.2&exclude=allocated
    • https://api.epa.gov/easey/dev/streaming-services/allowance-holdings?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&vintageYear=1.2&ownerOperator=ownerOperator&programCodeInfo=ARP&exclude=epaRegion
    • https://api.epa.gov/easey/dev/streaming-services/allowance-transactions?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&programCodeInfo=ARP&ownerOperator=ownerOperator&transactionBeginDate=transactionBeginDate&transactionEndDate=transactionEndDate&transactionType=Activate%20Conditional%20Allowances&vintageYear=1.2&exclude=buyAccountType
    • https://api.epa.gov/easey/dev/streaming-services/emissions-compliance?stateCode=AL&facilityId=1.2&ownerOperator=ownerOperator&year=1.2&exclude=ownerOperator
    • ..
  • Retrieved from Cache [10050] total: 13:
    • https://api.epa.gov/easey/dev/streaming-services/accounts/attributes?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&ownerOperator=ownerOperator&programCodeInfo=ARP&exclude=accountType
    • https://api.epa.gov/easey/dev/streaming-services/allowance-compliance?stateCode=AL&facilityId=1.2&ownerOperator=ownerOperator&programCodeInfo=ARP&year=1.2&exclude=allocated
    • https://api.epa.gov/easey/dev/streaming-services/allowance-holdings?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&vintageYear=1.2&ownerOperator=ownerOperator&programCodeInfo=ARP&exclude=epaRegion
    • https://api.epa.gov/easey/dev/streaming-services/allowance-transactions?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&programCodeInfo=ARP&ownerOperator=ownerOperator&transactionBeginDate=transactionBeginDate&transactionEndDate=transactionEndDate&transactionType=Activate%20Conditional%20Allowances&vintageYear=1.2&exclude=buyAccountType
    • https://api.epa.gov/easey/dev/streaming-services/emissions-compliance?stateCode=AL&facilityId=1.2&ownerOperator=ownerOperator&year=1.2&exclude=ownerOperator
    • ..

• Site: https://api-easey-dev.app.cloud.gov
  New Alerts

  • Unexpected Content-Type was returned [100001] total: 2:
    • https://api-easey-dev.app.cloud.gov/winscp.ini
    • https://api-easey-dev.app.cloud.gov/WS_FTP.ini
  • A Client Error response code was returned by the server [100000] total: 59:
    • https://api-easey-dev.app.cloud.gov
    • https://api-easey-dev.app.cloud.gov/
    • https://api-easey-dev.app.cloud.gov/._darcs
    • https://api-easey-dev.app.cloud.gov/.bzr
    • https://api-easey-dev.app.cloud.gov/.DS_Store
    • ..
  • Non-Storable Content [10049] total: 1:
    • https://api-easey-dev.app.cloud.gov/streaming-services/swagger-json

View the following link to download the report.
RunnerID:4632531563

[github-actions]

• Site: https://api.epa.gov
  Resolved Alerts

  • Application Error Disclosure [90022] total: 1:
  • Information Disclosure - Debug Error Messages [10023] total: 1:

• Site: https://api-easey-dev.app.cloud.gov

View the following link to download the report.
RunnerID:5228657722

[github-actions]

• Site: https://api.epa.gov
  New Alerts

  • Sec-Fetch-Dest Header is Missing [90005] total: 2:
    • https://api.epa.gov/easey/dev/streaming-services/accounts/attributes?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&ownerOperator=ownerOperator&programCodeInfo=ARP&exclude=accountType
    • https://api.epa.gov/easey/dev/streaming-services/facilities/attributes?year=1.2&facilityId=1.2&stateCode=AL&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&sourceCategory=Automotive%20Stampings&programCodeInfo=ARP&exclude=associatedStacks
  • Sec-Fetch-Mode Header is Missing [90005] total: 2:
    • https://api.epa.gov/easey/dev/streaming-services/accounts/attributes?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&ownerOperator=ownerOperator&programCodeInfo=ARP&exclude=accountType
    • https://api.epa.gov/easey/dev/streaming-services/facilities/attributes?year=1.2&facilityId=1.2&stateCode=AL&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&sourceCategory=Automotive%20Stampings&programCodeInfo=ARP&exclude=associatedStacks
  • Sec-Fetch-Site Header is Missing [90005] total: 2:
    • https://api.epa.gov/easey/dev/streaming-services/accounts/attributes?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&ownerOperator=ownerOperator&programCodeInfo=ARP&exclude=accountType
    • https://api.epa.gov/easey/dev/streaming-services/facilities/attributes?year=1.2&facilityId=1.2&stateCode=AL&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&sourceCategory=Automotive%20Stampings&programCodeInfo=ARP&exclude=associatedStacks
  • Sec-Fetch-User Header is Missing [90005] total: 2:
    • https://api.epa.gov/easey/dev/streaming-services/accounts/attributes?accountType=Compliance%20Assurance%20Surrender%20Account&accountNumber=accountNumber&facilityId=1.2&stateCode=AL&ownerOperator=ownerOperator&programCodeInfo=ARP&exclude=accountType
    • https://api.epa.gov/easey/dev/streaming-services/facilities/attributes?year=1.2&facilityId=1.2&stateCode=AL&unitType=Arch-fired%20boiler&unitFuelType=Coal&controlTechnologies=Additives%20to%20Enhance%20PAC%20and%20Existing%20Equipment%20Performance&sourceCategory=Automotive%20Stampings&programCodeInfo=ARP&exclude=associatedStacks

• Site: https://api-easey-dev.app.cloud.gov
  New Alerts

  • Sec-Fetch-Dest Header is Missing [90005] total: 1:
    • https://api-easey-dev.app.cloud.gov/streaming-services/swagger-json
  • Sec-Fetch-Mode Header is Missing [90005] total: 1:
    • https://api-easey-dev.app.cloud.gov/streaming-services/swagger-json
  • Sec-Fetch-Site Header is Missing [90005] total: 1:
    • https://api-easey-dev.app.cloud.gov/streaming-services/swagger-json
  • Sec-Fetch-User Header is Missing [90005] total: 1:
    • https://api-easey-dev.app.cloud.gov/streaming-services/swagger-json

View the following link to download the report.
RunnerID:5629343100

[github-actions]

• Site: https://api.epa.gov

• Site: https://api-easey-dev.app.cloud.gov
  Resolved Alerts

  • Sec-Fetch-Dest Header is Missing [90005] total: 1:
  • Sec-Fetch-Mode Header is Missing [90005] total: 1:
  • Sec-Fetch-Site Header is Missing [90005] total: 1:
  • Sec-Fetch-User Header is Missing [90005] total: 1:

View the following link to download the report.
RunnerID:5769329169

[github-actions]

• Site: https://api.epa.gov

• Site: https://api-easey-dev.app.cloud.gov
  New Alerts

  • Sec-Fetch-Dest Header is Missing [90005] total: 1:
    • https://api-easey-dev.app.cloud.gov/streaming-services/swagger-json
  • Sec-Fetch-Mode Header is Missing [90005] total: 1:
    • https://api-easey-dev.app.cloud.gov/streaming-services/swagger-json
  • Sec-Fetch-Site Header is Missing [90005] total: 1:
    • https://api-easey-dev.app.cloud.gov/streaming-services/swagger-json
  • Sec-Fetch-User Header is Missing [90005] total: 1:
    • https://api-easey-dev.app.cloud.gov/streaming-services/swagger-json

View the following link to download the report.
RunnerID:5839937512

[github-actions]

• Site: https://api.epa.gov

• Site: https://api-easey-dev.app.cloud.gov
  Resolved Alerts

  • Sec-Fetch-Dest Header is Missing [90005] total: 1:
  • Sec-Fetch-Mode Header is Missing [90005] total: 1:
  • Sec-Fetch-Site Header is Missing [90005] total: 1:
  • Sec-Fetch-User Header is Missing [90005] total: 1:

View the following link to download the report.
RunnerID:5983391130