Skip to content

OpenAPI Security requirement not defined in the security definitions

Description

Security definitions in the `security` section of a path or root should refer to an authentication scheme identified in the `securityDefinitions` section.

Code Example

yaml
...
security:
- petstore_auth:
- write:pets
- read:pets

...

Remediation

OpenAPI

Example:

Rule Details

FieldValue
IDIAC-1262
SeverityHIGH
IaC TypeOpenAPI
FrameworksOpenAPI
Checkov IDCKV_OPENAPI_6

References