unsupported security scheme type: apikey while running on a Swagger file

[I-S-Tech]

When running with my swagger file, I get an error

unsupported security scheme type: apikey

running command

vulnapi scan openapi myswagger.yaml

And having vulnapi installed from .deb package of the releases, and within a docker container.

While I can't post the entire Swagger, feel free to ask any question about it.

Thanks.

[emmanuelgautier]

Hi @I-S-Tech,

Thank you for reporting this issue! The API key security scheme is not yet supported, but I will work on it soon. Should be included in a next release in the coming weeks.

Could you please provide more details on how the API key is being passed? For example, is it passed as a bearer token in the header or in some other way?

[I-S-Tech]

Hi @emmanuelgautier, thanks for the reply !

Thanks for the precision, I look forward to the next release !

For the API key, here are the corresponding lines within the swagger file :

components:
  securitySchemes:
    ApiKeyAuth:
      type: apiKey
      in: header
      name: X-Api-Key