apisec-inc/Code Discovery - API Discovery
Automatically discover API endpoints and upload to API security platform
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| api-endpoint | External API endpoint URL | yes | — |
| api-token | Bearer token for API authentication | yes | — |
| repo-path | Path to repository root to analyze | no | . |
| config-path | Path to .codediscovery.yml config file (optional) | no | .codediscovery.yml |
| pr-title | Pull request title | no | chore: update OpenAPI specification |
| pr-body | Pull request body | no | Automatically generated OpenAPI specification |
| dry-run | Skip API upload (for testing) | no | false |
| host-url | Explicit OpenAPI server URL for the discovered API (e.g. https://api.example.com). Required when no parser extracts a host from your sources; without it the APIsec backend cannot create an application instance and state is never saved across runs. | no | "" |
Outputs
| name | description |
|---|---|
| spec-path | Path to generated OpenAPI specification |
| endpoints-count | Number of endpoints discovered |
| frameworks-detected | Comma-separated list of detected frameworks |
| application-id | Application ID from API (if uploaded) |
| instance-id | Instance ID from API (if uploaded) |
| pr-url | URL of created pull request |
| success | Whether discovery succeeded |