security-property-redefined

Flags ordinary parameters that duplicate credentials supplied by an active security scheme.

Attribute	Value
Category	Security
Maturity	Platinum
Lenient–Strict	Warning
Complete	Error

See it fail

security: [{ bearerAuth: [] }]
parameters:
  - in: header
    name: Authorization
    schema: { type: string }

Bearer, Basic, OAuth2, and header/query API-key shapes are checked. Names compare case-insensitively.

Fix it

Remove the duplicate parameter; keep the security scheme as the credential definition.

Nearby: security-defined, no-apikey-in-query-parameters.