no-empty-security

Flags operation-level security: [].

Attribute	Value
Category	Security
Maturity	Gold
Starter	Off
Lenient–Complete	Error

See it fail

get:
  security: []
  responses:
    '200': { description: OK }

Fix it

Remove the field to inherit root security, or declare a non-empty operation security requirement.

Does not flag

Operations whose normalized path ends in /health or /health/info.

Nearby: security-defined, protect-safe-operations.