{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":528967945,"defaultBranch":"main","name":"spectral-owasp-ruleset","ownerLogin":"stoplightio","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2022-08-25T18:14:13.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/10767217?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1710258598.0","currentOid":""},"activityList":{"items":[{"before":"498656af63959f961c87540f5f6d67c6611e9147","after":null,"ref":"refs/heads/fix-63","pushedAt":"2024-03-12T15:49:12.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"mnaumanali94","name":"Nauman","path":"/mnaumanali94","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/17899454?s=80&v=4"}},{"before":"d233da88b881d1486cc9aa762b77c99d2e44e47b","after":"913348e072d328abe2e178227f28dd2f5cf9ae0e","ref":"refs/heads/main","pushedAt":"2024-03-12T15:49:11.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"mnaumanali94","name":"Nauman","path":"/mnaumanali94","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/17899454?s=80&v=4"},"commit":{"message":"fix: use tostring to match url (#64)\n\n* fix: owasp:api7:2023-concerning-url-parameter rule","shortMessageHtmlLink":"fix: use tostring to match url (#64)"}},{"before":"be49ac7cf9cda04a719d920ee769497837c21a9c","after":"498656af63959f961c87540f5f6d67c6611e9147","ref":"refs/heads/fix-63","pushedAt":"2024-03-12T15:48:32.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"mnaumanali94","name":"Nauman","path":"/mnaumanali94","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/17899454?s=80&v=4"},"commit":{"message":"Update src/ruleset.ts\n\nCo-authored-by: Jakub Rożek ","shortMessageHtmlLink":"Update src/ruleset.ts"}},{"before":"c237408afa9e5c1ab6e84c7afea974a890d900b5","after":"be49ac7cf9cda04a719d920ee769497837c21a9c","ref":"refs/heads/fix-63","pushedAt":"2024-03-12T14:21:18.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"mnaumanali94","name":"Nauman","path":"/mnaumanali94","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/17899454?s=80&v=4"},"commit":{"message":"fix: owasp:api7:2023-concerning-url-parameter rule","shortMessageHtmlLink":"fix: owasp:api7:2023-concerning-url-parameter rule"}},{"before":null,"after":"c237408afa9e5c1ab6e84c7afea974a890d900b5","ref":"refs/heads/fix-63","pushedAt":"2024-03-11T06:48:37.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"mnaumanali94","name":"Nauman","path":"/mnaumanali94","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/17899454?s=80&v=4"},"commit":{"message":"fix: use tostring to match url","shortMessageHtmlLink":"fix: use tostring to match url"}},{"before":"761e6f2de04451332f963ca62dbc47a8017ddac6","after":null,"ref":"refs/heads/release-2023","pushedAt":"2024-03-05T11:06:10.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"mnaumanali94","name":"Nauman","path":"/mnaumanali94","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/17899454?s=80&v=4"}},{"before":"fa0912327430a4f2d8d8a1176ab101cdd1807cf9","after":"d233da88b881d1486cc9aa762b77c99d2e44e47b","ref":"refs/heads/main","pushedAt":"2024-03-05T11:06:09.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"mnaumanali94","name":"Nauman","path":"/mnaumanali94","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/17899454?s=80&v=4"},"commit":{"message":"feat: support for OWASP 2023 (#62)\n\nBREAKING CHANGE: Adds/Removes rule to cater for OWASP 2023 top 10 list","shortMessageHtmlLink":"feat: support for OWASP 2023 (#62)"}},{"before":"fa0912327430a4f2d8d8a1176ab101cdd1807cf9","after":"761e6f2de04451332f963ca62dbc47a8017ddac6","ref":"refs/heads/release-2023","pushedAt":"2024-03-05T11:05:35.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"mnaumanali94","name":"Nauman","path":"/mnaumanali94","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/17899454?s=80&v=4"},"commit":{"message":"feat: support for OWASP 2023\n\nBREAKING CHANGE: Adds/Removes rule to cater for OWASP 2023 top 10 list","shortMessageHtmlLink":"feat: support for OWASP 2023"}},{"before":null,"after":"fa0912327430a4f2d8d8a1176ab101cdd1807cf9","ref":"refs/heads/release-2023","pushedAt":"2024-03-05T11:03:51.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"mnaumanali94","name":"Nauman","path":"/mnaumanali94","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/17899454?s=80&v=4"},"commit":{"message":"BREAKING CHANGE: Release OWASP 2023 (#61)","shortMessageHtmlLink":"BREAKING CHANGE: Release OWASP 2023 (#61)"}},{"before":"575d5620e95d7391e86c939981ad4d789f0c9fe1","after":null,"ref":"refs/heads/release-owasp-2023","pushedAt":"2024-03-05T10:54:11.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"mnaumanali94","name":"Nauman","path":"/mnaumanali94","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/17899454?s=80&v=4"}},{"before":"5fe2624ebc98b5a5b685d64306480a187e6952dc","after":"fa0912327430a4f2d8d8a1176ab101cdd1807cf9","ref":"refs/heads/main","pushedAt":"2024-03-05T10:54:10.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"mnaumanali94","name":"Nauman","path":"/mnaumanali94","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/17899454?s=80&v=4"},"commit":{"message":"BREAKING CHANGE: Release OWASP 2023 (#61)","shortMessageHtmlLink":"BREAKING CHANGE: Release OWASP 2023 (#61)"}},{"before":null,"after":"575d5620e95d7391e86c939981ad4d789f0c9fe1","ref":"refs/heads/release-owasp-2023","pushedAt":"2024-03-05T10:50:17.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"mnaumanali94","name":"Nauman","path":"/mnaumanali94","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/17899454?s=80&v=4"},"commit":{"message":"BREAKING CHANGE: Release OWASP 2023","shortMessageHtmlLink":"BREAKING CHANGE: Release OWASP 2023"}},{"before":null,"after":"24337aa8f741520989beedb5acd672ff1551d073","ref":"refs/heads/release-v-2-0","pushedAt":"2024-03-05T10:42:27.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"mnaumanali94","name":"Nauman","path":"/mnaumanali94","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/17899454?s=80&v=4"},"commit":{"message":"Update README.md","shortMessageHtmlLink":"Update README.md"}},{"before":"f7f7e632f1721eb3f07d4289f8fb2dad98cc8f28","after":"5fe2624ebc98b5a5b685d64306480a187e6952dc","ref":"refs/heads/main","pushedAt":"2024-02-23T14:27:12.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"mnaumanali94","name":"Nauman","path":"/mnaumanali94","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/17899454?s=80&v=4"},"commit":{"message":"bump release to node 20 (#58)","shortMessageHtmlLink":"bump release to node 20 (#58)"}},{"before":"ce37483f77489507a0133e72f400f7352671c722","after":null,"ref":"refs/heads/feat/2023","pushedAt":"2024-02-05T14:36:36.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"philsturgeon","name":"Phil Sturgeon","path":"/philsturgeon","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/67381?s=80&v=4"}},{"before":"2e73f8ce559e1ce2d88d506daf281a496f154040","after":"f7f7e632f1721eb3f07d4289f8fb2dad98cc8f28","ref":"refs/heads/main","pushedAt":"2024-02-05T14:36:34.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"philsturgeon","name":"Phil Sturgeon","path":"/philsturgeon","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/67381?s=80&v=4"},"commit":{"message":"BREAKING: Rewrite to support OWASP API Security 2023 (#51)\n\n* Removes duplicated test case\r\n\r\n* Move API3 rules that focused on defining 400, 401, 500 responses out into API8.\r\n\r\n* add unevaluatedproperties rule for OAS 3.1\r\n\r\n* added owasp-api3-2023-constrained-additional/unevaluated tests\r\n\r\n* updated year on api1 and api2 unchanged\r\n\r\n* renamed api4:2019 to api4:2023 only\r\n\r\n* added owasp:api2:2023-write-restricted and owasp:api2:2023-read-restricted\r\n\r\n* Fixes #25: adds owasp:api5:2023-admin-security-unique\r\n\r\n* fixes #21 and makes no-nimeric-ids support any string\r\n\r\n* added support for no-server-http to use relative path.\r\n\r\n* partially fixes #52: Require servers use x-internal true/false\r\n\r\nto explicitly explain what is public or internal for documentation tools\r\n\r\n* fixes #52: Servers, define which environment is the API running in\r\n\r\n---------\r\n\r\nCo-authored-by: Ricagraca ","shortMessageHtmlLink":"BREAKING: Rewrite to support OWASP API Security 2023 (#51)"}},{"before":"f567f338561ecd389607cf296af827877a43db00","after":"ce37483f77489507a0133e72f400f7352671c722","ref":"refs/heads/feat/2023","pushedAt":"2024-02-05T14:35:47.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"philsturgeon","name":"Phil Sturgeon","path":"/philsturgeon","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/67381?s=80&v=4"},"commit":{"message":"added support for singulsr RateLimit header.","shortMessageHtmlLink":"added support for singulsr RateLimit header."}},{"before":"637ce184ec04097035d5eb2ae8d4d4d1626fef48","after":"f567f338561ecd389607cf296af827877a43db00","ref":"refs/heads/feat/2023","pushedAt":"2024-02-05T14:29:21.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"philsturgeon","name":"Phil Sturgeon","path":"/philsturgeon","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/67381?s=80&v=4"},"commit":{"message":"added support for singulsr RateLimit header.","shortMessageHtmlLink":"added support for singulsr RateLimit header."}},{"before":"3ede15a9fe9a3ba5cbf4cfef80aab1a75057a3d6","after":"637ce184ec04097035d5eb2ae8d4d4d1626fef48","ref":"refs/heads/feat/2023","pushedAt":"2024-02-02T13:59:10.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"philsturgeon","name":"Phil Sturgeon","path":"/philsturgeon","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/67381?s=80&v=4"},"commit":{"message":"added support for singulsr RateLimit header.","shortMessageHtmlLink":"added support for singulsr RateLimit header."}},{"before":"92ee14fafee6458b056e91b48d1306a757a5dbb6","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/babel/traverse-7.23.7","pushedAt":"2024-02-01T16:02:57.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":"a59822b2eba61d15175ed7b4252b19d1453b99a6","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/json5-2.2.3","pushedAt":"2024-02-01T16:02:37.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"philsturgeon","name":"Phil Sturgeon","path":"/philsturgeon","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/67381?s=80&v=4"}},{"before":"343043bbd43233b22f644b2093922fb5400792fa","after":"2e73f8ce559e1ce2d88d506daf281a496f154040","ref":"refs/heads/main","pushedAt":"2024-02-01T16:02:36.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"philsturgeon","name":"Phil Sturgeon","path":"/philsturgeon","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/67381?s=80&v=4"},"commit":{"message":"chore(deps-dev): bump json5 from 2.2.1 to 2.2.3 (#53)\n\nBumps [json5](https://github.com/json5/json5) from 2.2.1 to 2.2.3.\r\n- [Release notes](https://github.com/json5/json5/releases)\r\n- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/json5/json5/compare/v2.2.1...v2.2.3)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: json5\r\n dependency-type: indirect\r\n...\r\n\r\nSigned-off-by: dependabot[bot] \r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"chore(deps-dev): bump json5 from 2.2.1 to 2.2.3 (#53)"}},{"before":"8d254920f7e5bb7223c44f07a21f01007d37336e","after":"3ede15a9fe9a3ba5cbf4cfef80aab1a75057a3d6","ref":"refs/heads/feat/2023","pushedAt":"2024-01-31T16:15:36.000Z","pushType":"push","commitsCount":4,"pusher":{"login":"philsturgeon","name":"Phil Sturgeon","path":"/philsturgeon","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/67381?s=80&v=4"},"commit":{"message":"added owasp-api8-2023-define-cors-origin","shortMessageHtmlLink":"added owasp-api8-2023-define-cors-origin"}},{"before":"e7450f54cbc44307f91c11706d7c2977087e47e5","after":"8d254920f7e5bb7223c44f07a21f01007d37336e","ref":"refs/heads/feat/2023","pushedAt":"2024-01-31T16:08:35.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"philsturgeon","name":"Phil Sturgeon","path":"/philsturgeon","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/67381?s=80&v=4"},"commit":{"message":"Update CHANGELOG.md\n\nCo-authored-by: Frank Kilcommins ","shortMessageHtmlLink":"Update CHANGELOG.md"}},{"before":"4f3d94c99e4b445d5bc551eac2bf342a122c99c5","after":"e7450f54cbc44307f91c11706d7c2977087e47e5","ref":"refs/heads/feat/2023","pushedAt":"2024-01-31T13:09:44.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"philsturgeon","name":"Phil Sturgeon","path":"/philsturgeon","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/67381?s=80&v=4"},"commit":{"message":"feat: added owasp:api7:2023-concerning-url-parameter\n\nsimply looks out for parameters called callback, redirect, or has _url on the end, then gives information about ssrf.","shortMessageHtmlLink":"feat: added owasp:api7:2023-concerning-url-parameter"}},{"before":"b3174a90fbe80f5693cb13f8a5bd41bb6b70d7c6","after":"4f3d94c99e4b445d5bc551eac2bf342a122c99c5","ref":"refs/heads/feat/2023","pushedAt":"2024-01-25T17:56:30.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"philsturgeon","name":"Phil Sturgeon","path":"/philsturgeon","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/67381?s=80&v=4"},"commit":{"message":"note for 2023 vs 2019.","shortMessageHtmlLink":"note for 2023 vs 2019."}},{"before":null,"after":"92ee14fafee6458b056e91b48d1306a757a5dbb6","ref":"refs/heads/dependabot/npm_and_yarn/babel/traverse-7.23.7","pushedAt":"2024-01-25T00:17:33.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"chore(deps-dev): bump @babel/traverse from 7.19.1 to 7.23.7\n\nBumps [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) from 7.19.1 to 7.23.7.\n- [Release notes](https://github.com/babel/babel/releases)\n- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/babel/babel/commits/v7.23.7/packages/babel-traverse)\n\n---\nupdated-dependencies:\n- dependency-name: \"@babel/traverse\"\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"chore(deps-dev): bump @babel/traverse from 7.19.1 to 7.23.7"}},{"before":null,"after":"a59822b2eba61d15175ed7b4252b19d1453b99a6","ref":"refs/heads/dependabot/npm_and_yarn/json5-2.2.3","pushedAt":"2024-01-25T00:17:26.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"chore(deps-dev): bump json5 from 2.2.1 to 2.2.3\n\nBumps [json5](https://github.com/json5/json5) from 2.2.1 to 2.2.3.\n- [Release notes](https://github.com/json5/json5/releases)\n- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/json5/json5/compare/v2.2.1...v2.2.3)\n\n---\nupdated-dependencies:\n- dependency-name: json5\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"chore(deps-dev): bump json5 from 2.2.1 to 2.2.3"}},{"before":"679e3cd27b226e451c7c8a0f32716e37108f21dc","after":"b3174a90fbe80f5693cb13f8a5bd41bb6b70d7c6","ref":"refs/heads/feat/2023","pushedAt":"2024-01-23T19:37:59.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"philsturgeon","name":"Phil Sturgeon","path":"/philsturgeon","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/67381?s=80&v=4"},"commit":{"message":"set version so it can be automerged","shortMessageHtmlLink":"set version so it can be automerged"}},{"before":"de1c8c4c249afb83974f1de46191c91ca6e7f0e3","after":"679e3cd27b226e451c7c8a0f32716e37108f21dc","ref":"refs/heads/feat/2023","pushedAt":"2024-01-23T19:03:14.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"philsturgeon","name":"Phil Sturgeon","path":"/philsturgeon","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/67381?s=80&v=4"},"commit":{"message":"chore: updated dependencies","shortMessageHtmlLink":"chore: updated dependencies"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEE5H6KQA","startCursor":null,"endCursor":null}},"title":"Activity · stoplightio/spectral-owasp-ruleset"}