silwolJul 8, 2024
Is there any good command-line tooling available to verify that a #JSONSchema, #YAMLSchema or an #OpenAPI spec is consistent? All I can find is tooling that verifies data against a schema or OpenAPI spec, but I want a CI check which ensures that the schema or OpenAPI spec in itself is consistent, e.g. that all referenced components exist.
Show threadpostmodernMay 21, 2024

Next Question: assume this scanner also supports a YAML configuration file. How would you prefer to configure which workers are ran by default?

A. Explicitly listing each worker name as a YAML Array.

worker_set:
- foo
- bar
- baz

B. Selectively enabling/disabling workers, in addition to the default set of core workers, as a YAML Hash:

worker_set:
foo: true
bar: false
baz: true

C. Both

#cli #ux #yamlschema #configfile

A. Explicit YAML Array`
40%
B. Selective YAML Hash
40%
C. Both
20%
Poll ended at .
Show threadpostmodernMar 28, 2024

Another variation on the YAML configuration schema for a recon engine that has multiple "workers" that can be enabled/disabled and configured:

workers:
category1/worker1:
enabled: false
category2/worker2:
enabled: true
params:
foo: bar
...
concurrency: 4
category3/worker3:
enabled: false
params:
api_key: ...

By adding an explicit enabled: key, it allows configuring workers that are not enabled by default, but can be enabled by the user via the command-line options.
#yaml #yamlschema #recon

Better
50%
Worse
50%
Poll ended at .