Skip to content

Complete API KEY tutorial #27

Complete API KEY tutorial

Complete API KEY tutorial #27

Triggered via push February 26, 2024 14:32
Status Failure
Total duration 1m 33s
Artifacts

openapi.yml

on: push
Lint and validate OpenAPI document for pygeoapi configuration
1m 8s
Lint and validate OpenAPI document for pygeoapi configuration
Validate OpenAPI document against OWASP Top 10 API security rules
1m 20s
Validate OpenAPI document against OWASP Top 10 API security rules
Fit to window
Zoom out
Zoom in

Annotations

246 errors, 130 warnings, and 1 notice
oas3-valid-schema-example: pygeoapi-openapi.json#L1214
"default" property type must be string
Lint and validate OpenAPI document for pygeoapi configuration
fatal issues detected. Failing the process.
owasp:api4:2019-rate-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/responses/NotFound.yaml#L1
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/descriptionType.yaml#L3
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/metadata.yaml#L3
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-rate-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/responses/ProcessList.yaml#L1
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/format.yaml#L5
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/inputValueNoObject.yaml#L2
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-rate-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/responses/ExecuteAsync.yaml#L2
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/descriptionType.yaml#L5
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/additionalParameter.yaml#L6
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/statusInfo.yaml#L7
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/link.yaml#L5
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/format.yaml#L3
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/format.yaml#L5
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/responses/ExecuteAsync.yaml#L4
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/metadata.yaml#L5
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/link.yaml#L5
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/format.yaml#L3
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/responses/NotFound.yaml#L7
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/link.yaml#L7
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/metadata.yaml#L5
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/metadata.yaml#L3
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/exception.yaml#L7
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/exception.yaml#L9
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/link.yaml#L7
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/responses/NotFound.yaml#L7
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/statusInfo.yaml#L7
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/exception.yaml#L7
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/responses/ServerError.yaml#L7
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/metadata.yaml#L7
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/responses/ServerError.yaml#L7
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/processSummary.yaml#L10
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/format.yaml#L9
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/link.yaml#L10
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/descriptionType.yaml#L9
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/exception.yaml#L9
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/metadata.yaml#L7
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/responses/ExecuteAsync.yaml#L8
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/processSummary.yaml#L8
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/additionalParameter.yaml#L12
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/link.yaml#L10
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/link.yaml#L13
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/exception.yaml#L15
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/statusInfo.yaml#L13
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/link.yaml#L13
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/link.yaml#L16
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/statusInfo.yaml#L13
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/exception.yaml#L13
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/subscriber.yaml#L14
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/bbox.yaml#L14
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/exception.yaml#L13
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/statusInfo.yaml#L19
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/statusInfo.yaml#L22
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/link.yaml#L16
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/subscriber.yaml#L17
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/statusInfo.yaml#L25
Schema of type string must specify maxLength, enum, or const.
owasp:api7:2019-security-hosts-https-oas3: pygeoapi-openapi.json#L25
Server URLs MUST begin https://, and no other protocol is permitted.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/statusInfo.yaml#L28
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/exception.yaml#L15
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L135
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L108
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/subscriber.yaml#L11
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L139
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L135
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L143
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L159
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L166
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L108
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L205
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L139
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L143
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/statusInfo.yaml#L17
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L166
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L203
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/statusInfo.yaml#L17
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L327
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L205
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L301
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L159
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L327
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-integer-limit-legacy: pygeoapi-openapi.json#L340
Schema of type integer must specify minimum and maximum.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L395
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L353
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-integer-format: pygeoapi-openapi.json#L340
Schema of type integer must specify format (int32 or int64).
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L361
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L361
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L353
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L398
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L395
Schema of type string must specify maxLength, enum, or const.
owasp:api1:2019-no-numeric-ids: pygeoapi-openapi.json#L340
OWASP API1:2019 - Use random IDs that cannot be guessed. UUIDs are preferred.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L428
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L398
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-array-limit: pygeoapi-openapi.json#L293
Schema of type array must specify maxItems.
owasp:api4:2019-rate-limit: pygeoapi-openapi.json#L404
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L434
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L431
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L434
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L440
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L428
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L440
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L437
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L203
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L437
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L431
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L750
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L737
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L737
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-rate-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L752
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L750
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L750
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L865
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L865
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L724
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L724
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L855
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-rate-limit: pygeoapi-openapi.json#L788
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L881
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L817
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L750
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-rate-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L857
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-rate-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L867
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L817
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-rate-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L819
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L855
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L1078
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-rate-limit: pygeoapi-openapi.json#L922
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L881
Schema of type string must specify a format, pattern, enum, or const.
owasp:api2:2019-protection-global-unsafe: pygeoapi-openapi.json#L1108
This operation is not protected by any security scheme.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L1121
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1121
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1078
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L1158
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1207
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1158
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L601
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-rate-limit: pygeoapi-openapi.json#L538
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L1199
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L601
Schema of type string must specify maxLength, enum, or const.
owasp:api1:2019-no-numeric-ids: pygeoapi-openapi.json#L685
OWASP API1:2019 - Use random IDs that cannot be guessed. UUIDs are preferred.
owasp:api4:2019-integer-limit-legacy: pygeoapi-openapi.json#L685
Schema of type integer must specify minimum and maximum.
owasp:api4:2019-integer-format: pygeoapi-openapi.json#L685
Schema of type integer must specify format (int32 or int64).
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L711
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-array-limit: pygeoapi-openapi.json#L649
Schema of type array must specify maxItems.
owasp:api4:2019-rate-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L699
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-integer-limit-legacy: pygeoapi-openapi.json#L698
Schema of type integer must specify minimum and maximum.
owasp:api4:2019-rate-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L564
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-integer-format: pygeoapi-openapi.json#L698
Schema of type integer must specify format (int32 or int64).
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L711
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: https:/schemas.opengis.net/ogcapi/features/part1/1.0/openapi/ogcapi-features-1.yaml#L558
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1199
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-array-limit: pygeoapi-openapi.json#L1235
Schema of type array must specify maxItems.
owasp:api4:2019-rate-limit: pygeoapi-openapi.json#L1261
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1218
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L1211
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1211
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L1203
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-integer-format: pygeoapi-openapi.json#L1398
Schema of type integer must specify format (int32 or int64).
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L1218
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1203
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1383
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1319
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-integer-limit-legacy: pygeoapi-openapi.json#L1413
Schema of type integer must specify minimum and maximum.
owasp:api4:2019-integer-limit-legacy: pygeoapi-openapi.json#L1398
Schema of type integer must specify minimum and maximum.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L1207
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L1443
Schema of type string must specify a format, pattern, enum, or const.
owasp:api2:2019-jwt-best-practices: pygeoapi-openapi.json#L1453
Security schemes using JWTs must explicitly declare support for RFC8725 in the description.
owasp:api4:2019-rate-limit: pygeoapi-openapi.json#L1248
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-array-limit: pygeoapi-openapi.json#L1317
Schema of type array must specify maxItems.
owasp:api4:2019-string-restricted: pygeoapi-openapi.json#L1319
Schema of type string must specify a format, pattern, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1349
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1443
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-rate-limit: pygeoapi-openapi.json#L1245
All 2XX and 4XX responses should define rate limiting headers.
owasp:api4:2019-string-limit: pygeoapi-openapi.json#L1222
Schema of type string must specify maxLength, enum, or const.
owasp:api4:2019-integer-format: pygeoapi-openapi.json#L1413
Schema of type integer must specify format (int32 or int64).
Validate OpenAPI document against OWASP Top 10 API security rules
fatal issues detected. Failing the process.
oas3-unused-component: pygeoapi-openapi.json#L1311
Potentially unused component has been detected.
oas3-unused-component: pygeoapi-openapi.json#L1438
Potentially unused component has been detected.
oas3-unused-component: pygeoapi-openapi.json#L1392
Potentially unused component has been detected.
owasp:api6:2019-no-additionalProperties: https:/schemas.opengis.net/ogcapi/processes/part1/1.0/openapi/schemas/exception.yaml#L17
If the additionalProperties keyword is used it must be set to false.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L100
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L100
Operation is missing responses[500].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L46
Operation is missing rate limiting response in responses[429].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L100
Operation is missing rate limiting response in responses[429].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L135
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L100
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L100
Operation is missing responses[401].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L135
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L170
Operation is missing responses[401].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L135
Operation is missing responses[401].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L46
Operation is missing rate limiting response in responses[429].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L46
Operation is missing responses[401].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L135
Operation is missing rate limiting response in responses[429].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L170
Operation is missing rate limiting response in responses[429].content.
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L100
Operation is missing responses[500].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L170
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L46
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L205
Operation is missing responses[401].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L205
Operation is missing rate limiting response in responses[429].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L205
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L170
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L205
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L375
Operation is missing responses[401].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L375
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L403
Operation is missing responses[401].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L403
Operation is missing rate limiting response in responses[429].content.
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L403
Operation is missing responses[500].
owasp:api3:2019-define-error-validation: pygeoapi-openapi.json#L403
Missing error response of either 400, 422 or 4XX.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L375
Operation is missing rate limiting response in responses[429].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L375
Operation is missing rate limiting response in responses[429].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L403
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L403
Operation is missing responses[500].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L403
Operation is missing responses[401].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L460
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L504
Operation is missing responses[401].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L460
Operation is missing rate limiting response in responses[429].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L460
Operation is missing responses[401].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L460
Operation is missing responses[401].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L504
Operation is missing rate limiting response in responses[429].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L504
Operation is missing rate limiting response in responses[429].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L561
Operation is missing rate limiting response in responses[429].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L787
Operation is missing rate limiting response in responses[429].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L759
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L759
Operation is missing responses[401].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L787
Operation is missing responses[401].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L759
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L844
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L787
Operation is missing responses[500].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L844
Operation is missing rate limiting response in responses[429].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L759
Operation is missing rate limiting response in responses[429].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L787
Operation is missing rate limiting response in responses[429].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L844
Operation is missing responses[401].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L888
Operation is missing rate limiting response in responses[429].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L844
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-validation: pygeoapi-openapi.json#L787
Missing error response of either 400, 422 or 4XX.
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L921
Operation is missing responses[500].content.
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L942
Operation is missing responses[500].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L921
Operation is missing rate limiting response in responses[429].content.
owasp:api3:2019-define-error-validation: pygeoapi-openapi.json#L942
Missing error response of either 400, 422 or 4XX.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L921
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L888
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L787
Operation is missing responses[500].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L787
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L888
Operation is missing responses[401].content.
owasp:api3:2019-define-error-validation: pygeoapi-openapi.json#L921
Missing error response of either 400, 422 or 4XX.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L942
Operation is missing responses[401].content.
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L921
Operation is missing responses[500].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L888
Operation is missing rate limiting response in responses[429].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L921
Operation is missing responses[401].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L971
Operation is missing rate limiting response in responses[429].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L942
Operation is missing rate limiting response in responses[429].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L971
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L942
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L971
Operation is missing responses[401].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L942
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L921
Operation is missing responses[401].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L1012
Operation is missing responses[401].content.
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L942
Operation is missing responses[500].content.
owasp:api3:2019-define-error-validation: pygeoapi-openapi.json#L1012
Missing error response of either 400, 422 or 4XX.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L1045
Operation is missing responses[401].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L1045
Operation is missing rate limiting response in responses[429].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L1045
Operation is missing rate limiting response in responses[429].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L1090
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-validation: pygeoapi-openapi.json#L971
Missing error response of either 400, 422 or 4XX.
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L1090
Operation is missing responses[500].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L1012
Operation is missing responses[401].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L1090
Operation is missing rate limiting response in responses[429].content.
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L971
Operation is missing responses[500].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L1012
Operation is missing rate limiting response in responses[429].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L1045
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L971
Operation is missing responses[401].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L1090
Operation is missing responses[401].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L1090
Operation is missing responses[401].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L1012
Operation is missing rate limiting response in responses[429].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L1130
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-validation: pygeoapi-openapi.json#L1090
Missing error response of either 400, 422 or 4XX.
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L971
Operation is missing responses[500].content.
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L1045
Operation is missing responses[500].
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L1090
Operation is missing responses[500].
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L1130
Operation is missing responses[500].content.
owasp:api3:2019-define-error-validation: pygeoapi-openapi.json#L1130
Missing error response of either 400, 422 or 4XX.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L1170
Operation is missing responses[401].content.
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L1130
Operation is missing responses[500].
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L1170
Operation is missing responses[500].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L1130
Operation is missing rate limiting response in responses[429].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L1170
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L1045
Operation is missing responses[500].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L537
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L1170
Operation is missing responses[500].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L1170
Operation is missing rate limiting response in responses[429].content.
owasp:api3:2019-define-error-validation: pygeoapi-openapi.json#L1170
Missing error response of either 400, 422 or 4XX.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L1130
Operation is missing responses[401].
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L537
Operation is missing rate limiting response in responses[429].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L1170
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L537
Operation is missing responses[500].content.
owasp:api4:2019-rate-limit-responses-429: pygeoapi-openapi.json#L561
Operation is missing rate limiting response in responses[429].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L561
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L1130
Operation is missing responses[401].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L561
Operation is missing responses[401].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L537
Operation is missing responses[401].content.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L537
Operation is missing responses[401].
owasp:api3:2019-define-error-responses-500: pygeoapi-openapi.json#L537
Operation is missing responses[500].
owasp:api3:2019-define-error-validation: pygeoapi-openapi.json#L537
Missing error response of either 400, 422 or 4XX.
owasp:api3:2019-define-error-responses-401: pygeoapi-openapi.json#L504
Operation is missing responses[401].
owasp:api3:2019-define-error-validation: pygeoapi-openapi.json#L1045
Missing error response of either 400, 422 or 4XX.
owasp:api6:2019-no-additionalProperties: pygeoapi-openapi.json#L1431
If the additionalProperties keyword is used it must be set to false.
owasp:api2:2019-protection-global-unsafe-strict: pygeoapi-openapi.json#L1108
This operation is not protected by any security scheme.