Show HN: Open API and GraphQL Fuzzing via GitHub Actions

#1

Post by dmitry_dygalo » Fri, Jul 22, 2022, 4:37 PM UTC

Schemathesis is a specification-centric API fuzzing tool for Open API and GraphQL-based applications.

I've been building Schemathesis GitHub app for a while and now it is ready to use. You run it as a part of your workflow, then it comes to PRs and adds little reports about API fuzzing results.

Folks, I'd appreciate your feedback about the tool or its GitHub integration :)

Show HN: Open API and GraphQL Fuzzing via GitHub Actions
github.com

Re: Show HN: Open API and GraphQL Fuzzing via GitHub Actions

#2

Post by jviotti » Sun, Jul 24, 2022, 8:30 PM UTC

Hi Dimitry, nice to see you around here! :)

This is really cool. How about a CircleCI orb too? Postman has plenty of micro-services with OpenAPI definitions that could really use this. My bet is that a lot of mature companies doing spec-first API development will be using more commercial CI providers than GitHub Pages.

Re: Show HN: Open API and GraphQL Fuzzing via GitHub Actions

#3

Post by dmitry_dygalo » Wed, Jul 27, 2022, 12:02 PM UTC

jviotti wrote: post #2

Hi Dimitry, nice to see you around here! :) This is really cool. How about a CircleCI orb too? Postman has plenty of micro-services with OpenAPI definitions that could really use this. My bet is that a lot of mature companies doing spec-first API development will be using more commercial CI providers than GitHub Pages.

Hi Juan! Likewise :)

Thank you! That's a great point! Added to the backlog :) Most of the machinery is provider-independent on the Schemathesis side, so adding a new provider should be relatively straightforward. I'll take a look at it soon

Re: Show HN: Open API and GraphQL Fuzzing via GitHub Actions

#4

Post by jviotti » Thu, Jul 28, 2022, 2:07 AM UTC

dmitry_dygalo wrote: post #3

jviotti wrote: post #2

Hi Dimitry, nice to see you around here! :) This is really cool. How about a CircleCI orb too? Postman has plenty of micro-services with OpenAPI definitions that could really use this. My bet is that a lot of mature companies doing spec-first API development will be using more commercial CI providers than GitHub Pages.

Hi Juan! Likewise :) Thank you! That's a great point! Added to the backlog :) Most of the machinery is provider-independent on the Schemathesis side, so adding a new provider should be relatively straightforward. I'll take a look at it soon

Let me know once this is ready, so we can give it a shot inside Postman :)