Taylor

Results 19 issues of Taylor

**Describe the issue** Users would like the ability to check that Terraform code only uses modules from trusted sources. We would need to add the ability to check the module...

enhancement
terraform

**Describe the issue** If you have more than a few failed checks, it can be difficult to scroll to the top to see the summary or in a terminal, it...

good first issue
outputs

**Describe the issue** Implicit flow is deprecated and should not be used **Examples** ```json ... "securitySchemes": { "flows": { "implicit": { ... } } } ... ```

good first issue
checks
openapi

**Describe the issue** HTTP is unsafe to use for endpoints **Examples** ```json ... "paths": { "/": { "get": { "schemes": [ "http" ], ... } } } ... ```

good first issue
checks
openapi

**Describe the issue** Password is an unsafe method for OAuth2 **Examples** ```json ... "securityDefinitions": { "oAuthPlusPassword": { "type": "oauth2", "flow": "password", ... } } ... ```

good first issue
checks
openapi

**Describe the issue** Sending basic credentials over http is dangerous **Examples** ```json ... "securitySchemes": { "auth1": { "type": "http", "scheme": "basic" } } ... ```

good first issue
checks
openapi

**Describe the issue** OAuth 1 has been deprecated and should not be used **Examples** ```json ... "securitySchemes": { "auth1": { "scheme": "oauth", ... } } ... ```

good first issue
checks
openapi

**Describe the issue** Sending API keys over a network **Examples** ```json ... "securitySchemes": { "apiKey1": { "type": "apiKey", ... } } ... ```

good first issue
checks
openapi

**Describe the issue** Add a check that flags the use of a password with OAuth2 **Examples** ```json ... "securityDefinitions": { "name": { "type": "oauth2", "flow": "password", ... } } ......

good first issue
checks
openapi

**Describe the issue** Checks for a global server object that uses http instead of https **Example** ```json "servers": [ { "url": "https://test.com/v1", #good "description": "Good server" }, { "url": "http://test.com/v2",...

good first issue
checks
openapi