Clearer mechianism to disable active scans about cherrybomb HOT 3 OPEN

Hey @jayvdb

Thanks for the feature suggestion!

We are looking into it, and the next version should include a more user-friendly CLI.

Also, we're planning on releasing v1.0 soon, and we're considering adding a config file to Cherrybomb that will allow you to change settings easily and even save them for future runs.
Do you have anything else you would like to see added as an option in this config file?

from cherrybomb.

Being able to disable specific checks only on a specific schema or endpoint would be handy in order to whitelist existing parts of the OAS while preventing reoccurrences of the problem on new parts of the OAS.

When designing the new config file, it may be helpful to allow supporting the https://github.com/stoplightio/spectral (TS) config, which is also supported by https://github.com/daveshanley/vacuum (Go), which allows defining custom rules, e.g. https://github.com/co-cddo/api-standards-linting/blob/main/spectral-ruleset-govuk-public/ruleset.yaml

from cherrybomb.

Being able to disable specific checks only on a specific schema or endpoint would be handy in order to whitelist existing parts of the OAS while preventing reoccurrences of the problem on new parts of the OAS.

When designing the new config file, it may be helpful to allow supporting the https://github.com/stoplightio/spectral (TS) config, which is also supported by https://github.com/daveshanley/vacuum (Go), which allows defining custom rules, e.g. https://github.com/co-cddo/api-standards-linting/blob/main/spectral-ruleset-govuk-public/ruleset.yaml

Hey @jayvdb

When it will be released, there will the option to disable/enable specific checks using said configuration file :)

Regarding adding support for the format you've mentioned, it's not something we have planned right now but we will consider it, thanks!

from cherrybomb.