mercedes-benz / sechub

SecHub provides a central API to test software with different security tools.
https://mercedes-benz.github.io/sechub/
MIT License
259 stars 58 forks source link

Implement the openapi spec files manually #3238

Open hamidonos opened 1 week ago

hamidonos commented 1 week ago

Situation

Automatically generating the OpenAPI specification file can be a good practice in some cases, but there are several reasons why you might want to avoid it:

  1. Accuracy: Automatically generated specifications can sometimes miss out on details or not fully capture the nuances of your API. This can lead to inaccuracies in the generated documentation or client SDKs.

  2. Customization: When you generate the specification automatically, you might not have as much control over the final output. This can limit your ability to customize the documentation or the structure of the specification.

  3. Maintenance: If your API changes frequently, maintaining an automatically generated specification can become challenging. You would need to regenerate the specification every time there's a change in the API.

  4. Performance: The process of generating the specification can add overhead to your build or deployment process, which might not be desirable in some cases.

  5. Security: If the generation process is not properly secured, it could potentially expose sensitive information about your API.

Wanted

We want to maintain our openapi spec files manually so that we have full control over the specification. Furthermore we don't want to rely on any 3rd party generators & gradle build steps.

Solution