Uh oh!
There was an error while loading. Please reload this page.
fix(contacts): add fieldValue (preferred) + deprecate field_value in custom-field schemas - #320
fix(contacts): add fieldValue (preferred) + deprecate field_value in custom-field schemas#320MCPVOT wants to merge 1 commit into
Orca Security Scan Summary
| Status | Check | Issues by priority | |
|---|---|---|---|
| Infrastructure as Code | View in Orca |
🛡️ The following IaC misconfigurations have been detected
| NAME | FILE | ||
|---|---|---|---|
| Response on operations that should have a body has undefined schema | apps/contacts.json | View in code | |
| Response on operations that should have a body has undefined schema | apps/contacts.json | View in code | |
| Response on operations that should have a body has undefined schema | apps/contacts.json | View in code | |
| Response on operations that should have a body has undefined schema | apps/contacts.json | View in code | |
| Unknown Property | apps/contacts.json | View in code | |
| Unknown Property | apps/contacts.json | View in code | |
| Unknown Property | apps/contacts.json | View in code | |
| Unknown Property | apps/contacts.json | View in code | |
| Unknown Property | apps/contacts.json | View in code | |
| Unknown Property | apps/contacts.json | View in code | |
| Unknown Property | apps/contacts.json | View in code | |
| Unknown Property | apps/contacts.json | View in code | |
| Unknown Property | apps/contacts.json | View in code | |
| Unknown Property | apps/contacts.json | View in code | |
| Components Object Fixed Field Key Improperly Named | apps/contacts.json | View in code | |
| Components Object Fixed Field Key Improperly Named | apps/contacts.json | View in code | |
| Components Object Fixed Field Key Improperly Named | apps/contacts.json | View in code | |
| Components Object Fixed Field Key Improperly Named | apps/contacts.json | View in code | |
| Object Without Required Property | apps/contacts.json | View in code | |
| Object Without Required Property | apps/contacts.json | View in code | |
| Object Without Required Property | apps/contacts.json | View in code | |
| Object Without Required Property | apps/contacts.json | View in code | |
| Object Without Required Property | apps/contacts.json | View in code | |
| Object Without Required Property | apps/contacts.json | View in code | |
| Object Without Required Property | apps/contacts.json | View in code | |
| ... | ... | ... | ... |
Annotations
Check warning on line 4524 in apps/contacts.json
orca-security-us/ Orca Security - Infrastructure as Code
[INFO] Unknown Property
Details:
OpenAPI v3.0 specifications contain properties not recognized by the standard
schema, indicating potential typos, deprecated fields, or custom extensions.
Unknown properties may cause validation failures or unexpected API behavior.
Review and remove unrecognized fields or properly namespace custom extensions
using 'x-' prefix.
Recommendation:
The field '$ref' is known in the contact object
Check warning on line 3395 in apps/contacts.json
orca-security-us/ Orca Security - Infrastructure as Code
[INFO] Unknown Property
Details:
OpenAPI v3.0 specifications contain properties not recognized by the standard
schema, indicating potential typos, deprecated fields, or custom extensions.
Unknown properties may cause validation failures or unexpected API behavior.
Review and remove unrecognized fields or properly namespace custom extensions
using 'x-' prefix.
Recommendation:
The field '%!s(int=2)' is known in the responses object
Check warning on line 3395 in apps/contacts.json
orca-security-us/ Orca Security - Infrastructure as Code
[INFO] Unknown Property
Details:
OpenAPI v3.0 specifications contain properties not recognized by the standard
schema, indicating potential typos, deprecated fields, or custom extensions.
Unknown properties may cause validation failures or unexpected API behavior.
Review and remove unrecognized fields or properly namespace custom extensions
using 'x-' prefix.
Recommendation:
The field '%!s(int=3)' is known in the responses object
Check warning on line 5070 in apps/contacts.json
orca-security-us/ Orca Security - Infrastructure as Code
[INFO] Unknown Property
Details:
OpenAPI v3.0 specifications contain properties not recognized by the standard
schema, indicating potential typos, deprecated fields, or custom extensions.
Unknown properties may cause validation failures or unexpected API behavior.
Review and remove unrecognized fields or properly namespace custom extensions
using 'x-' prefix.
Recommendation:
The field 'x-tagGroups' is known in the openapi object
Check warning on line 4838 in apps/contacts.json
orca-security-us/ Orca Security - Infrastructure as Code
[INFO] Unknown Property
Details:
OpenAPI v3.0 specifications contain properties not recognized by the standard
schema, indicating potential typos, deprecated fields, or custom extensions.
Unknown properties may cause validation failures or unexpected API behavior.
Review and remove unrecognized fields or properly namespace custom extensions
using 'x-' prefix.
Recommendation:
The field '$ref' is known in the contact object
Check warning on line 4671 in apps/contacts.json
orca-security-us/ Orca Security - Infrastructure as Code
[INFO] Unknown Property
Details:
OpenAPI v3.0 specifications contain properties not recognized by the standard
schema, indicating potential typos, deprecated fields, or custom extensions.
Unknown properties may cause validation failures or unexpected API behavior.
Review and remove unrecognized fields or properly namespace custom extensions
using 'x-' prefix.
Recommendation:
The field '$ref' is known in the contact object
Check warning on line 3425 in apps/contacts.json
orca-security-us/ Orca Security - Infrastructure as Code
[INFO] Unknown Property
Details:
OpenAPI v3.0 specifications contain properties not recognized by the standard
schema, indicating potential typos, deprecated fields, or custom extensions.
Unknown properties may cause validation failures or unexpected API behavior.
Review and remove unrecognized fields or properly namespace custom extensions
using 'x-' prefix.
Recommendation:
The field 'type' is known in the responses object
Check warning on line 3395 in apps/contacts.json
orca-security-us/ Orca Security - Infrastructure as Code
[INFO] Unknown Property
Details:
OpenAPI v3.0 specifications contain properties not recognized by the standard
schema, indicating potential typos, deprecated fields, or custom extensions.
Unknown properties may cause validation failures or unexpected API behavior.
Review and remove unrecognized fields or properly namespace custom extensions
using 'x-' prefix.
Recommendation:
The field '%!s(int=1)' is known in the responses object
Check warning on line 3794 in apps/contacts.json
orca-security-us/ Orca Security - Infrastructure as Code
[INFO] Unknown Property
Details:
OpenAPI v3.0 specifications contain properties not recognized by the standard
schema, indicating potential typos, deprecated fields, or custom extensions.
Unknown properties may cause validation failures or unexpected API behavior.
Review and remove unrecognized fields or properly namespace custom extensions
using 'x-' prefix.
Recommendation:
The field '$ref' is known in the contact object
Check warning on line 3395 in apps/contacts.json
orca-security-us/ Orca Security - Infrastructure as Code
[INFO] Unknown Property
Details:
OpenAPI v3.0 specifications contain properties not recognized by the standard
schema, indicating potential typos, deprecated fields, or custom extensions.
Unknown properties may cause validation failures or unexpected API behavior.
Review and remove unrecognized fields or properly namespace custom extensions
using 'x-' prefix.
Recommendation:
The field '%!s(int=0)' is known in the responses object
Check warning on line 2908 in apps/contacts.json
orca-security-us/ Orca Security - Infrastructure as Code
[INFO] Components Object Fixed Field Key Improperly Named
Details:
Component object field keys in OpenAPI specifications must follow naming
conventions allowing only alphanumeric characters, periods, hyphens, and
underscores. Non-compliant keys cause parsing errors and break tooling
compatibility. Use keys matching the pattern `^[a-zA-Z0-9\.\-_]+$`.
Recommendation:
components.{{securitySchemes}}.{{Location-Access}} is properly namedCheck warning on line 2932 in apps/contacts.json
orca-security-us/ Orca Security - Infrastructure as Code
[INFO] Components Object Fixed Field Key Improperly Named
Details:
Component object field keys in OpenAPI specifications must follow naming
conventions allowing only alphanumeric characters, periods, hyphens, and
underscores. Non-compliant keys cause parsing errors and break tooling
compatibility. Use keys matching the pattern `^[a-zA-Z0-9\.\-_]+$`.
Recommendation:
components.{{securitySchemes}}.{{Agency-Access-Only}} is properly namedCheck warning on line 2924 in apps/contacts.json
orca-security-us/ Orca Security - Infrastructure as Code
[INFO] Components Object Fixed Field Key Improperly Named
Details:
Component object field keys in OpenAPI specifications must follow naming
conventions allowing only alphanumeric characters, periods, hyphens, and
underscores. Non-compliant keys cause parsing errors and break tooling
compatibility. Use keys matching the pattern `^[a-zA-Z0-9\.\-_]+$`.
Recommendation:
components.{{securitySchemes}}.{{Agency-Access}} is properly namedCheck warning on line 2916 in apps/contacts.json
orca-security-us/ Orca Security - Infrastructure as Code
[INFO] Components Object Fixed Field Key Improperly Named
Details:
Component object field keys in OpenAPI specifications must follow naming
conventions allowing only alphanumeric characters, periods, hyphens, and
underscores. Non-compliant keys cause parsing errors and break tooling
compatibility. Use keys matching the pattern `^[a-zA-Z0-9\.\-_]+$`.
Recommendation:
components.{{securitySchemes}}.{{Location-Access-Only}} is properly namedCheck warning on line 3352 in apps/contacts.json
orca-security-us/ Orca Security - Infrastructure as Code
[INFO] Object Without Required Property
Details:
OpenAPI v3 specification objects lack required fields defined by the standard,
causing schema validation failures and potential client integration issues.
Missing required properties prevent proper API documentation parsing and code
generation. Include all mandatory fields as specified in the OpenAPI 3.0
specification.
Recommendation:
tags has all required fields
Check warning on line 2709 in apps/contacts.json
orca-security-us/ Orca Security - Infrastructure as Code
[INFO] Object Without Required Property
Details:
OpenAPI v3 specification objects lack required fields defined by the standard,
causing schema validation failures and potential client integration issues.
Missing required properties prevent proper API documentation parsing and code
generation. Include all mandatory fields as specified in the OpenAPI 3.0
specification.
Recommendation:
tags has all required fields
Check warning on line 1842 in apps/contacts.json
orca-security-us/ Orca Security - Infrastructure as Code
[INFO] Object Without Required Property
Details:
OpenAPI v3 specification objects lack required fields defined by the standard,
causing schema validation failures and potential client integration issues.
Missing required properties prevent proper API documentation parsing and code
generation. Include all mandatory fields as specified in the OpenAPI 3.0
specification.
Recommendation:
tags has all required fields
Check warning on line 2832 in apps/contacts.json
orca-security-us/ Orca Security - Infrastructure as Code
[INFO] Object Without Required Property
Details:
OpenAPI v3 specification objects lack required fields defined by the standard,
causing schema validation failures and potential client integration issues.
Missing required properties prevent proper API documentation parsing and code
generation. Include all mandatory fields as specified in the OpenAPI 3.0
specification.
Recommendation:
tags has all required fields
Check warning on line 3395 in apps/contacts.json
orca-security-us/ Orca Security - Infrastructure as Code
[INFO] Object Without Required Property
Details:
OpenAPI v3 specification objects lack required fields defined by the standard,
causing schema validation failures and potential client integration issues.
Missing required properties prevent proper API documentation parsing and code
generation. Include all mandatory fields as specified in the OpenAPI 3.0
specification.
Recommendation:
responses has all required fields
Check warning on line 4595 in apps/contacts.json
orca-security-us/ Orca Security - Infrastructure as Code
[INFO] Object Without Required Property
Details:
OpenAPI v3 specification objects lack required fields defined by the standard,
causing schema validation failures and potential client integration issues.
Missing required properties prevent proper API documentation parsing and code
generation. Include all mandatory fields as specified in the OpenAPI 3.0
specification.
Recommendation:
tags has all required fields