blst-security / cherrybomb

Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests.

Home Page:https://www.blstsecurity.com/cherrybomb

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Schema not recognised by cherry bomb

kraktus opened this issue · comments

Hello,

Thank you for your project, however I am unable to run it on the Lichess spec due to the following error:

$ cherrybomb --file ../berserk/lichess-spec-fixed.json --profile passive 

╭━━━┳╮╱╱╱╱╱╱╱╱╱╱╱╱╭╮╱╱╱╱╱╱╱╭╮
┃╭━╮┃┃╱╱╱╱╱╱╱╱╱╱╱╱┃┃╱╱╱╱╱╱╱┃┃
┃┃╱╰┫╰━┳━━┳━┳━┳╮╱╭┫╰━┳━━┳╮╭┫╰━╮
┃┃╱╭┫╭╮┃┃━┫╭┫╭┫┃╱┃┃╭╮┃╭╮┃╰╯┃╭╮┃
┃╰━╯┃┃┃┃┃━┫┃┃┃┃╰━╯┃╰╯┃╰╯┃┃┃┃╰╯┃
╰━━━┻╯╰┻━━┻╯╰╯╰━╮╭┻━━┻━━┻┻┻┻━━╯
╱╱╱╱╱╱╱╱╱╱╱╱╱╱╭━╯┃
╱╱╱╱╱╱╱╱╱╱╱╱╱╱╰━━╯       v1.0.0

Starting Cherrybomb...
Opening OAS file...
Parsing OAS file...
Error: Error creating OAS struct: data did not match any variant of untagged enum SchemaRef

I believe it's the same as #100.

You can find the spec online at: https://lichess.org/api.

Hey @kraktus
We're checking what the issue is and we'll update you soon.

Thanks for reaching out :)

Hey @OmerWow! What is the progress of this issue? I'm trying your tool with openapi.json generated by FastAPI but have the same error as @kraktus

Hi @karolpawlowski, we are still checking it out, we'll should get back to you pretty soon, sorry for the delay

Hi, I am also running into the same error:

Starting Cherrybomb...
Opening OAS file...
Parsing OAS file...
Error: Error creating OAS struct: data did not match any variant of untagged enum SchemaRef

I'm using an openapi.json file generated by swagger.

Hi, I am also running into the same error:

Starting Cherrybomb...
Opening OAS file...
Parsing OAS file...
Error: Error creating OAS struct: data did not match any variant of untagged enum SecSchemeRef

Cherrybomb v1.0.0 within the ECR provided container