mvp

openapi.json

@@ -0,0 +1,131 @@
+{
+  "openapi": "3.1.0",
+  "info": {
+    "title": "TAS — Tea Advanced Security",
+    "description": "Security reporting and gating API for Gitea. Upload SARIF reports per repo/branch; get allowed/new_findings for CI gating.",
+    "version": "1.0.0"
+  },
+  "servers": [{ "url": "http://localhost:3000", "description": "Local" }],
+  "paths": {
+    "/repos/{owner}/{repo}/branches/{branch}/reports": {
+      "post": {
+        "operationId": "postReposByOwnerByRepoBranchesByBranchReports",
+        "description": "Upload a SARIF report for a repository and branch. Replaces any existing report. On non-default branches, compares to baseline and returns allowed/new_findings for CI gating.",
+        "request": {
+          "params": {
+            "owner": {
+              "description": "Repository owner (e.g. t.behrendt)",
+              "required": true
+            },
+            "repo": {
+              "description": "Repository name (e.g. k_gitea)",
+              "required": true
+            },
+            "branch": { "description": "Branch name", "required": true }
+          },
+          "body": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "description": "SARIF 2.1 document with runs[]"
+                }
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Report stored and (for non-default branch) gating result",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "allowed": { "type": "boolean" },
+                    "reason": { "type": "string" },
+                    "new_critical": { "type": "number" },
+                    "new_high": { "type": "number" },
+                    "new_medium": { "type": "number" },
+                    "new_low": { "type": "number" },
+                    "new_findings": {
+                      "type": "array",
+                      "items": {
+                        "type": "object",
+                        "properties": {
+                          "rule_id": { "type": "string" },
+                          "level": { "type": "string" },
+                          "message": { "type": "string" },
+                          "severity": {
+                            "type": "string",
+                            "enum": ["CRITICAL", "HIGH", "MEDIUM", "LOW"]
+                          },
+                          "artifact_uri": { "type": "string" },
+                          "region": {
+                            "type": "object",
+                            "properties": {
+                              "start_line": {
+                                "anyOf": [
+                                  { "type": "number" },
+                                  { "type": "null" }
+                                ]
+                              },
+                              "start_column": {
+                                "anyOf": [
+                                  { "type": "number" },
+                                  { "type": "null" }
+                                ]
+                              }
+                            },
+                            "required": ["start_line", "start_column"]
+                          }
+                        },
+                        "required": [
+                          "rule_id",
+                          "level",
+                          "message",
+                          "severity",
+                          "artifact_uri",
+                          "region"
+                        ]
+                      }
+                    }
+                  },
+                  "required": [
+                    "allowed",
+                    "new_critical",
+                    "new_high",
+                    "new_medium",
+                    "new_low",
+                    "new_findings"
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "parameters": [
+          {
+            "schema": { "type": "string" },
+            "in": "path",
+            "name": "owner",
+            "required": true
+          },
+          {
+            "schema": { "type": "string" },
+            "in": "path",
+            "name": "repo",
+            "required": true
+          },
+          {
+            "schema": { "type": "string" },
+            "in": "path",
+            "name": "branch",
+            "required": true
+          }
+        ]
+      }
+    }
+  },
+  "components": {}
+}