Confirmation of endpoints scanned

[slaterx]

Hi team,

I am wondering, how can I get confirmation of the endpoints scanned when you scan with curl or openapi?

Our API has a lot of endpoints, and with the current output, I can't tell whether the tool found all endpoints and attempted to reach each:

echo "secret-token" | vulnapi scan openapi /tmp/swagger.json


| WELL-KNOWN PATHS | URL |
|------------------|-----|
| OpenAPI          | N/A |
| GraphQL          | N/A |


Congratulations! No issues were found.

| OPERATION | RISK LEVEL | CVSS 4.0 SCORE | OWASP | VULNERABILITY |
|-----------|------------|----------------|-------|---------------|

Needless to say that the swagger.json I am using is a valid swagger: