added
Web App Scanning: OpenAPI Specification by URL
6 months ago by Lance Duvall
A new setting has been added to the Tenable-provided API Scan template that enables users to provide a URL for the OpenAPI specification for the RESTful API they want to scan. This new functionality adds a layer of convenience over the file upload option, and the URL is checked before every scan to ensure that the API specification is up to date.
A new parameter called openapi_file_url has been added to the settings.scope object to support this new feature. The new parameter is described in the following table:
| Body Parameter | Data Type | Description |
|---|---|---|
settings.scope.openapi_file_url | string | The URL for the OpenAPI specification describing the RESTful API that you want to scan. The URL must start with http:// or https:// and end with .json, .yaml, or .yml. |
This change affects the following endpoints:
| Endpoint | Name | Description |
|---|---|---|
| POST /was/v2/configs | Create scan configuration | Creates a new scan configuration. |
| PUT /was/v2/configs/{config_id} | Upsert scan configuration | Updates an existing scan configuration or creates a new scan configuration. |