tejasramanujam/API Security Fuzzer & Vulnerability Scanner
Automatically scan your API for OWASP Top 10 vulnerabilities using its OpenAPI specification.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| spec-file | Path to the OpenAPI specification file (YAML or JSON) | yes | openapi.yaml |
| target-url | Base URL of the target API to scan | yes | — |
| fuzzer-types | Comma-separated list of fuzzers to run (injection,auth,data_exposure,logic) | no | injection,auth,data_exposure,logic |
| concurrency | Number of concurrent requests (max 50) | no | 10 |
| timeout | Request timeout in seconds | no | 30 |
| format | Output format (json or sarif) | no | sarif |
| fail-on | Fail the build if vulnerabilities of this severity or higher are found | no | critical |
| auth-token | Bearer token or API key for authenticated scanning | no | — |
Outputs
no outputs