rules: # INFO / METADATA info-title-required: description: API info must have a title. severity: error given: "$.info" then: field: title function: truthy info-description-required: description: API info must have a description. severity: warn given: "$.info" then: field: description function: truthy info-version-required: description: API info must have a version. severity: error given: "$.info" then: field: version function: truthy # OPENAPI VERSION openapi-version-3: description: APIs should use OpenAPI 3.x specification. severity: warn given: "$" then: field: openapi function: pattern functionOptions: match: "^3\\." # SERVERS servers-defined: description: At least one server must be defined. severity: error given: "$" then: field: servers function: truthy servers-https-only: description: All server URLs must use HTTPS. severity: error given: "$.servers[*]" then: field: url function: pattern functionOptions: match: "^https://" # PATHS — NAMING CONVENTIONS paths-no-trailing-slash: description: Path must not have a trailing slash. severity: warn given: "$.paths[*]~" then: function: pattern functionOptions: notMatch: "/$" paths-no-query-string: description: Path must not contain a query string. severity: error given: "$.paths[*]~" then: function: pattern functionOptions: notMatch: "\\?" paths-kebab-case: description: Path segments should use kebab-case. severity: info given: "$.paths[*]~" then: function: pattern functionOptions: match: "^(/[a-z0-9{}-]+)+$" # OPERATIONS operation-summary-required: description: Every operation must have a summary. severity: error given: "$.paths[*][get,post,put,patch,delete]" then: field: summary function: truthy operation-summary-aerodatabox-prefix: description: Operation summaries should start with "AeroDataBox". severity: warn given: "$.paths[*][get,post,put,patch,delete].summary" then: function: pattern functionOptions: match: "^AeroDataBox " operation-description-required: description: Every operation should have a description. severity: warn given: "$.paths[*][get,post,put,patch,delete]" then: field: description function: truthy operation-id-required: description: Every operation must have an operationId. severity: error given: "$.paths[*][get,post,put,patch,delete]" then: field: operationId function: truthy operation-tags-required: description: Every operation must have at least one tag. severity: warn given: "$.paths[*][get,post,put,patch,delete]" then: field: tags function: truthy # PARAMETERS parameter-description-required: description: Every parameter must have a description. severity: warn given: "$.paths[*][get,post,put,patch,delete].parameters[*]" then: field: description function: truthy parameter-schema-required: description: Every parameter must have a schema. severity: error given: "$.paths[*][get,post,put,patch,delete].parameters[*]" then: field: schema function: truthy # RESPONSES response-success-required: description: Every operation must have at least one response. severity: error given: "$.paths[*][get,post,put,patch,delete]" then: field: responses function: truthy response-description-required: description: Every response must have a description. severity: error given: "$.paths[*][get,post,put,patch,delete].responses[*]" then: field: description function: truthy # SCHEMAS schema-description-required: description: Top-level schemas should have a description. severity: info given: "$.components.schemas[*]" then: field: description function: truthy # SECURITY security-schemes-defined: description: Security schemes should be defined in components. severity: warn given: "$.components" then: field: securitySchemes function: truthy # HTTP METHOD CONVENTIONS get-no-request-body: description: GET operations must not have a request body. severity: error given: "$.paths[*].get" then: field: requestBody function: falsy # GENERAL QUALITY microcks-operation-present: description: Each operation should have x-microcks-operation for mock server support. severity: info given: "$.paths[*][get,post,put,patch,delete]" then: field: x-microcks-operation function: truthy