Operation objects do not have the 'produces' field defined for GET operations misconfiguration detec

Rule Details

Cortex AppSec Rule ID	APPSEC_OPENAPI_16
Category - Subcategory	Public Exposure - APIs
Provider	OTHER
Severity	LOW
Framework	OpenAPI

Impact

This rule checks to ensure that for every GET operation in an OpenAPI (version 2.0) file, there is a 'produces' field defined. The 'produces' field specifies the MIME type of the responses an operation can produce. If it is not defined, it may lead to ambiguity or incorrect handling of the response by the client. This could potentially create issues regarding the security and functionality of the API.

How to Fix

Ensure that you have a securityScheme component and application. For example: [source,go]

components: security: