Skip to main content

protect-safe-operations

Requires GET, HEAD, and OPTIONS path operations to inherit or declare non-empty security requirements.

AttributeValue
CategorySecurity
MaturityPlatinum
Lenient–StrictWarning
CompleteError

See it fail

get:
security: []
responses: { '200': { description: OK } }

Fix it

Declare a non-empty operation requirement or remove the override to inherit non-empty root security.

Nearby: protect-unsafe-operations, no-empty-security.