-
Notifications
You must be signed in to change notification settings - Fork 0
chore: audit api spec with vacuum #166
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
ba98825 to
4585e72
Compare
mrdanish26
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can you fix the CI failure please
4585e72 to
3ada1a1
Compare
Should be good now, thanks! Also, feel free to merge the PR after approving, I don't have permissions to merge to master |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
This PR introduces automated API specification auditing using the Vacuum tool to ensure OpenAPI specification quality. The changes add a comprehensive ruleset configuration and integrate the auditing process into the CI/CD pipeline to catch API specification issues early in the development cycle.
Key Changes:
- Added a custom ruleset.yaml configuration with 27 validation rules covering schemas, operations, security, and best practices
- Integrated Vacuum v0.18.1 into the pull request workflow to automatically audit generated API specifications
- New CI job generates OpenAPI specs and validates them against the ruleset, failing the build on errors
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 9 comments.
| File | Description |
|---|---|
| ruleset.yaml | Defines comprehensive validation rules for OpenAPI specifications including schema validation, security checks, and operation requirements with BitGo-specific customizations for tags and operationIds |
| .github/workflows/pull_request.yaml | Adds new audit-api-spec job that installs dependencies, downloads Vacuum CLI tool, generates API spec from source, and validates it with custom ruleset |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
mrdanish26
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can you address the copilot's comments
103edee to
e88f439
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
d3c2184 to
84a464f
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
Copilot reviewed 2 out of 2 changed files in this pull request and generated 4 comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
84a464f to
dbf12d1
Compare
pranavjain97
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm!
Ticket: DX-2457