Skip to content
GitLab
Next
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • GitLab GitLab
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
    • Locked Files
  • Issues 44,761
    • Issues 44,761
    • List
    • Boards
    • Service Desk
    • Milestones
    • Iterations
    • Requirements
  • Merge requests 1,332
    • Merge requests 1,332
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
    • Test Cases
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Package Registry
    • Container Registry
    • Infrastructure Registry
  • Monitor
    • Monitor
    • Metrics
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Code review
    • Insights
    • Issue
    • Repository
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • GitLab.orgGitLab.org
  • GitLabGitLab
  • Issues
  • #228652
Closed
Open
Issue created Jul 13, 2020 by Sam Kerr@stkerr🎙Developer

Enable fuzzing of OpenAPI v3 applications

Problem to solve

There are multiple versions of OpenAPI and many customers have defined API specifications in the latest version, which is v3. However, GitLab does not support this. This means they must then decide to either convert to an older version of the spec or not use GitLab's fuzz testing.

Intended users

  • Delaney (Development Team Lead)
  • Sasha (Software Developer)
  • Sam (Security Analyst)

User experience goal

The user should be able to have the same fuzz testing experience whether they have a v2 or a v3 OpenAPI specification in their repo.

Proposal

Add support for v3 protocol.

Allow users to use the same approach for this that they currently do for v2 protocols. The goal of this is so that the experience between the two is identical.

Further details

What does success look like, and how can we measure that?

Users can use v3 OpenAPI specs.

What is the type of buyer?

GitLab Ultimate ~"fuzzing::api" Category:Fuzz Testing

Is this a cross-stage feature?

No

Links / references

The following page may contain information related to upcoming products, features and functionality. It is important to note that the information presented is for informational purposes only, so please do not rely on the information for purchasing or planning purposes. Just like with all projects, the items mentioned on the page are subject to change or delay, and the development, release, and timing of any products, features, or functionality remain at the sole discretion of GitLab Inc.

Edited Oct 13, 2021 by 🤖 GitLab Bot 🤖
Assignee
Assign to
Time tracking