openclarity / apiclarity

An API security tool to capture and analyze API traffic, test API endpoints, reconstruct Open API specification, and identify API security risks. 
https://apiclarity.io
Apache License 2.0
498 stars 64 forks source link

List shadow and zombie APIs at top-level #342

Open amccormi opened 1 year ago

amccormi commented 1 year ago

Is your feature request related to a problem? Please describe. RIght now, if a shadow or zombie API is detected, it is reported in two potential places - in the "Latest spec diffs" on the dashboard UI (if it happened recently) and in the API event list. Either way, a specific symbol is shown for shadow or zombie. This is the only indication that a shadow/zombie API has been detected.

Describe the solution you'd like It would be great if a listing could be added to the trace analysis for the API indicating it is a shadow or zombie. That way, a more permanent record of the detection could be kept. These both weaken API security, so the reporting of them should be lasting and obvious.