Automatic checks for security rules

[ioggstream]

Hi @pvdbosch, in Italy we have an online tool that can check some
of your security rules on a given OpenAPI document.

https://italia.github.io/api-oas-checker/

It would be great to join our efforts!

[pvdbosch]

Hi @ioggstream , very interesting to see what you've developed!

We've also been trying out an OpenAPI checker tools in https://www.gcloud.belgium.be/rest/, with our current focus more on the non-security REST guidelines, as the security rules haven't been worked out yet.
I'll pass this on to my colleagues working on this (in issue belgif/rest-guide#34).

I know they've also been trying out spectral, but did encounter some limitations defining some of the rules. We also want to be able to integrate it in a continuous integration build, in first instance as a Maven plugin.

[ioggstream]

Feel free to reach out at roberto@teamdigitale.governo.it