rules: # INFO / METADATA info-title-required: description: Info title must be defined. severity: error given: "$.info" then: field: title function: truthy info-description-required: description: Info description must be defined and non-empty. severity: warn given: "$.info" then: field: description function: truthy info-version-required: description: API version must be defined. severity: error given: "$.info" then: field: version function: truthy # OPENAPI VERSION openapi-version-3: description: Must use OpenAPI 3.x. severity: error given: "$" then: field: openapi function: pattern functionOptions: match: "^3\\." # SERVERS servers-defined: description: At least one server must be defined. severity: error given: "$" then: field: servers function: truthy servers-https: description: Server URLs must use HTTPS. severity: error given: "$.servers[*].url" then: function: pattern functionOptions: match: "^https://" # PATHS paths-kebab-case: description: Path segments must use lowercase with hyphens or parameter brackets. severity: warn given: "$.paths[*]~" then: function: pattern functionOptions: match: "^(/[a-z0-9{}_/-]+)+$" paths-no-trailing-slash: description: Paths must not end with a trailing slash. severity: warn given: "$.paths[*]~" then: function: pattern functionOptions: notMatch: "/$" # OPERATIONS operation-summary-required: description: Every operation must have a summary. severity: error given: "$.paths[*][get,post,put,delete,patch]" then: field: summary function: truthy operation-summary-vehicle-api-prefix: description: Operation summaries must start with "Vehicle API". severity: warn given: "$.paths[*][get,post,put,delete,patch].summary" then: function: pattern functionOptions: match: "^Vehicle API " operation-description-required: description: Every operation must have a description. severity: warn given: "$.paths[*][get,post,put,delete,patch]" then: field: description function: truthy operation-operationid-required: description: Every operation must have an operationId. severity: error given: "$.paths[*][get,post,put,delete,patch]" then: field: operationId function: truthy operation-operationid-camelcase: description: operationId must use camelCase. severity: warn given: "$.paths[*][get,post,put,delete,patch].operationId" then: function: pattern functionOptions: match: "^[a-z][a-zA-Z0-9]+$" operation-tags-required: description: Every operation must have at least one tag. severity: warn given: "$.paths[*][get,post,put,delete,patch]" then: field: tags function: truthy # PARAMETERS parameter-description-required: description: All parameters must have a description. severity: warn given: "$..parameters[*]" then: field: description function: truthy parameter-api-key-in-query: description: API key should be passed as query parameter named api_key. severity: info given: "$.components.securitySchemes[*]" then: function: schema functionOptions: schema: type: object # RESPONSES response-success-required: description: Every operation must have at least one 2xx response. severity: error given: "$.paths[*][get,post,put,delete,patch].responses" then: function: schema functionOptions: schema: type: object anyOf: - required: ["200"] - required: ["201"] - required: ["204"] response-description-required: description: All responses must have a description. severity: error given: "$.paths[*][get,post,put,delete,patch].responses[*]" then: field: description function: truthy response-404-defined: description: GET operations by ID should define a 404 response. severity: info given: "$.paths[*].get.responses" then: function: schema functionOptions: schema: type: object # SCHEMAS schema-description-required: description: Top-level component schemas must have a description. severity: warn given: "$.components.schemas[*]" then: field: description function: truthy schema-properties-camelcase: description: Schema property names should use camelCase (Edmunds convention). severity: info given: "$.components.schemas[*].properties[*]~" then: function: pattern functionOptions: match: "^[a-z][a-zA-Z0-9]*$" # SECURITY security-schemes-defined: description: Security schemes must be defined in components. severity: error given: "$.components" then: field: securitySchemes function: truthy # VEHICLE API SPECIFIC vehicle-api-pagination: description: List operations should support pageSize and pageNum for pagination. severity: info given: "$.paths[*].get.operationId" then: function: pattern functionOptions: match: "^(list|search|get)" # HTTP METHODS get-no-request-body: description: GET operations must not have a request body. severity: error given: "$.paths[*].get" then: field: requestBody function: falsy # GENERAL QUALITY no-empty-descriptions: description: Descriptions must not be empty strings. severity: warn given: "$..description" then: function: pattern functionOptions: match: ".+"