llucs/SpecShield Action
Validate API endpoints against your OpenAPI specification
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| spec | Path to OpenAPI spec file (JSON or YAML) | yes | — |
| base-url | Base URL of the API. Defaults to spec server URL | no | — |
| headers | Custom request headers as JSON object (e.g., {"Authorization": "Bearer xxx"}) | no | — |
| timeout | Request timeout in milliseconds | no | 10000 |
| skip-methods | Comma-separated methods to skip (e.g., post,put,delete) | no | — |
| only-methods | Comma-separated methods to test (e.g., get,post) | no | — |
| params | Additional parameters as JSON object (e.g., {"petId": "42"}) | no | — |
| report | Output format: text, json, junit, html, sarif | no | text |
| parallel | Number of parallel requests | no | 5 |
| baseline | Path to baseline file for known failures | no | — |
| github-annotations | Enable GitHub PR annotations | no | true |
Outputs
| name | description |
|---|---|
| score | API Score (0-100) |
| passed | Number of passed checks |
| failed | Number of failed checks |