v4.32.1
Generated at2026-10-19 12:55:09 UTC

Failed

438 of 537 tested operations failed
Time limit reached
2 warnings affect results
Cases run196,355across 4 phases
Operations537438 failed, 99 passed
Duration1h 0m
Base URLhttp://0.0.0.0:41459/api/v1Spechttp://0.0.0.0:41459/swagger.v1.jsonCommandst run http://0.0.0.0:41459/swagger.v1.json --url http://0.0.0.0:41459/api/v1 --report-html-path schemathesis-report --max-time 3600 --request-timeout 30 --continue-on-failure --no-shrink --suppress-health-check all --output-sanitize falseSeed63477058153872229949103711208491337214Phases
  1. Examplesfailed
  2. Coveragefailed
  3. Fuzzingfailed
  4. Statefulfailed
Checks
allow_header_conformancecontent_type_conformanceensure_resource_availabilityignored_authmissing_required_header+9 morelessnegative_data_rejectionnot_a_server_errorobject_level_authorizationpositive_data_acceptanceresponse_headers_conformanceresponse_schema_conformancestatus_code_conformanceunsupported_methoduse_after_free

Warnings

Timeline

Failures found1143 total
Coverage4m 6s, 313 found
1.4s: OPTIONS /admin/actions/runners/registration-token: Allow header mismatch
1.4s: POST /admin/actions/runners/registration-token: Server error on undeclared request Content-Type
1.5s: POST /admin/cron/{task}: Server error on undeclared request Content-Type
1.7s: POST /admin/hooks: Schema-valid request rejected
1.7s: POST /admin/hooks: Undocumented status code
2.8s: POST /admin/hooks: Server error on undeclared request Content-Type
2.9s: POST /admin/unadopted/{owner}/{repo}: Server error on undeclared request Content-Type
3s: POST /markdown: JSON deserialization error
3s: POST /markdown: Missing Content-Type header
3.1s: POST /markdown: Undocumented Content-Type
3.1s: POST /markdown: Schema-violating request accepted
3.5s: POST /markdown: Server error on undeclared request Content-Type
3.5s: POST /markdown/raw: JSON deserialization error
3.5s: POST /markdown/raw: Missing Content-Type header
3.7s: POST /markdown/raw: Schema-violating request accepted
3.7s: POST /markdown/raw: Server error on undeclared request Content-Type
3.8s: POST /markup: JSON deserialization error
3.8s: POST /markup: Missing Content-Type header
3.9s: POST /markup: Undocumented Content-Type
3.9s: POST /markup: Schema-violating request accepted
4.4s: POST /markup: Server error on undeclared request Content-Type
4.4s: POST /orgs: Schema-valid request rejected
5.4s: POST /orgs: Server error on undeclared request Content-Type
5.4s: POST /orgs/{org}/actions/runners/registration-token: Undocumented status code
5.5s: OPTIONS /orgs/{org}/actions/runners/registration-token: Allow header mismatch
5.5s: POST /orgs/{org}/actions/runners/registration-token: Server error on undeclared request Content-Type
5.8s: POST /orgs/{org}/avatar: Server error on undeclared request Content-Type
6.9s: POST /orgs/{org}/hooks: Server error on undeclared request Content-Type
7.5s: POST /orgs/{org}/labels: Server error on undeclared request Content-Type
8.1s: POST /orgs/{org}/projects: Server error on undeclared request Content-Type
8.1s: POST /orgs/{org}/rename: Undocumented status code
8.4s: POST /orgs/{org}/rename: Server error on undeclared request Content-Type
9.5s: POST /orgs/{org}/teams: Server error on undeclared request Content-Type
9.6s: POST /repos/{owner}/{repo}/actions/runners/registration-token: Undocumented status code
9.6s: OPTIONS /repos/{owner}/{repo}/actions/runners/registration-token: Allow header mismatch
9.7s: POST /repos/{owner}/{repo}/actions/runners/registration-token: Server error on undeclared request Content-Type
9.9s: POST /repos/{owner}/{repo}/actions/runs/{run}/approve: Server error on undeclared request Content-Type
10.1s: POST /repos/{owner}/{repo}/actions/runs/{run}/cancel: Server error on undeclared request Content-Type
10.3s: POST /repos/{owner}/{repo}/actions/runs/{run}/force-cancel: Server error on undeclared request Content-Type
10.5s: POST /repos/{owner}/{repo}/actions/runs/{run}/rerun: Server error on undeclared request Content-Type
10.6s: POST /repos/{owner}/{repo}/actions/runs/{run}/rerun-failed-jobs: Server error on undeclared request Content-Type
10.9s: POST /repos/{owner}/{repo}/avatar: Server error on undeclared request Content-Type
11s: OPTIONS /repos/{owner}/{repo}/branch_protections/priority: Allow header mismatch
11.4s: POST /repos/{owner}/{repo}/branch_protections/priority: Server error on undeclared request Content-Type
11.9s: POST /repos/{owner}/{repo}/branches: Server error on undeclared request Content-Type
14s: POST /repos/{owner}/{repo}/contents: Server error on undeclared request Content-Type
15.5s: POST /repos/{owner}/{repo}/contents/{filepath}: Server error on undeclared request Content-Type
17s: POST /repos/{owner}/{repo}/diffpatch: Server error on undeclared request Content-Type
17.4s: POST /repos/{owner}/{repo}/file-contents: Server error on undeclared request Content-Type
17.8s: POST /repos/{owner}/{repo}/forks: Server error on undeclared request Content-Type
18.9s: POST /repos/{owner}/{repo}/hooks: Server error on undeclared request Content-Type
20.4s: POST /repos/{owner}/{repo}/issues: Server error on undeclared request Content-Type
20.8s: POST /repos/{owner}/{repo}/issues/{index}/assets: Server error on undeclared request Content-Type
21.2s: POST /repos/{owner}/{repo}/issues/{index}/assignees: Server error on undeclared request Content-Type
21.8s: POST /repos/{owner}/{repo}/issues/{index}/blocks: Server error on undeclared request Content-Type
22.2s: POST /repos/{owner}/{repo}/issues/{index}/comments: Server error on undeclared request Content-Type
22.6s: POST /repos/{owner}/{repo}/issues/{index}/deadline: Server error on undeclared request Content-Type
23.2s: POST /repos/{owner}/{repo}/issues/{index}/dependencies: Server error on undeclared request Content-Type
23.7s: POST /repos/{owner}/{repo}/issues/{index}/labels: Server error on undeclared request Content-Type
23.9s: POST /repos/{owner}/{repo}/issues/{index}/pin: Server error on undeclared request Content-Type
24.3s: POST /repos/{owner}/{repo}/issues/{index}/reactions: Server error on undeclared request Content-Type
24.6s: POST /repos/{owner}/{repo}/issues/{index}/stopwatch/start: Server error on undeclared request Content-Type
24.8s: POST /repos/{owner}/{repo}/issues/{index}/stopwatch/stop: Server error on undeclared request Content-Type
25.3s: POST /repos/{owner}/{repo}/keys: Server error on undeclared request Content-Type
25.4s: OPTIONS /repos/{owner}/{repo}/keys/tokens: Allow header mismatch
25.7s: POST /repos/{owner}/{repo}/keys/tokens: Server error on undeclared request Content-Type
26.4s: POST /repos/{owner}/{repo}/labels: Server error on undeclared request Content-Type
26.7s: POST /repos/{owner}/{repo}/merge-upstream: Server error on undeclared request Content-Type
27.3s: POST /repos/{owner}/{repo}/milestones: Server error on undeclared request Content-Type
27.4s: POST /repos/{owner}/{repo}/mirror-sync: Server error on undeclared request Content-Type
28s: POST /repos/{owner}/{repo}/projects: Server error on undeclared request Content-Type
29.7s: POST /repos/{owner}/{repo}/pulls: Server error on undeclared request Content-Type
30.8s: POST /repos/{owner}/{repo}/pulls/{index}/merge: Server error on undeclared request Content-Type
31.1s: OPTIONS /repos/{owner}/{repo}/pulls/{index}/requested_reviewers: Allow header mismatch
31.6s: POST /repos/{owner}/{repo}/pulls/{index}/requested_reviewers: Server error on undeclared request Content-Type
31.8s: OPTIONS /repos/{owner}/{repo}/pulls/{index}/update: Allow header mismatch
32s: POST /repos/{owner}/{repo}/pulls/{index}/update: Server error on undeclared request Content-Type
32.2s: POST /repos/{owner}/{repo}/push_mirrors-sync: Server error on undeclared request Content-Type
32.8s: POST /repos/{owner}/{repo}/statuses/{sha}: Server error on undeclared request Content-Type
33.4s: POST /repos/{owner}/{repo}/tag_protections: Server error on undeclared request Content-Type
33.5s: POST /repos/{owner}/{repo}/transfer/accept: Server error on undeclared request Content-Type
33.7s: POST /repos/{owner}/{repo}/transfer/reject: Server error on undeclared request Content-Type
34.1s: POST /repos/{owner}/{repo}/wiki/new: Server error on undeclared request Content-Type
35.5s: POST /repos/{template_owner}/{template_repo}/generate: Server error on undeclared request Content-Type
35.6s: OPTIONS /user/actions/runners/registration-token: Allow header mismatch
35.7s: POST /user/actions/runners/registration-token: Server error on undeclared request Content-Type
35.7s: POST /user/applications/oauth2: Schema-valid request rejected
35.7s: POST /user/applications/oauth2: Undocumented status code
36.3s: POST /user/applications/oauth2: Server error on undeclared request Content-Type
36.4s: POST /user/avatar: Schema-valid request rejected
36.4s: POST /user/avatar: Undocumented status code
36.6s: POST /user/avatar: Server error on undeclared request Content-Type
36.7s: POST /user/emails: Schema-valid request rejected
36.9s: POST /user/emails: Schema-valid request rejected
37s: POST /user/emails: Server error on undeclared request Content-Type
37s: POST /user/gpg_key_verify: Schema-valid request rejected
37.1s: POST /user/gpg_key_verify: Server error on undeclared request Content-Type
37.1s: POST /user/gpg_keys: Schema-valid request rejected
37.5s: POST /user/gpg_keys: Server error on undeclared request Content-Type
37.5s: POST /user/hooks: Schema-valid request rejected
37.5s: POST /user/hooks: Undocumented status code
38.6s: POST /user/hooks: Server error on undeclared request Content-Type
38.6s: POST /user/keys: Schema-valid request rejected
39.1s: POST /user/keys: Server error on undeclared request Content-Type
39.1s: POST /user/projects: Schema-valid request rejected
39.6s: POST /user/projects: Server error on undeclared request Content-Type
39.9s: PUT /notifications: Schema-violating request accepted
39.9s: PUT /notifications: Undocumented status code
41.8s: PUT /repos/{owner}/{repo}/notifications: Undocumented status code
43.2s: GET /admin/actions/jobs: Schema-valid request rejected
43.4s: GET /admin/actions/jobs: Schema-violating request accepted
43.9s: GET /admin/actions/runners: Schema-violating request accepted
44.1s: GET /admin/actions/runs: Schema-valid request rejected
44.3s: GET /admin/actions/runs: Schema-violating request accepted
44.8s: GET /admin/cron: Schema-violating request accepted
45.2s: GET /admin/emails: Schema-violating request accepted
45.7s: GET /admin/emails/search: Schema-violating request accepted
46.1s: GET /admin/hooks: Schema-violating request accepted
46.8s: GET /admin/orgs: Schema-violating request accepted
47.2s: GET /admin/packages: Schema-violating request accepted
48.2s: GET /admin/unadopted: Schema-violating request accepted
48.5s: GET /gitignore/templates: API accepts requests without authentication
48.6s: GET /label/templates: API accepts requests without authentication
48.8s: GET /licenses: API accepts requests without authentication
49.3s: GET /notifications: Schema-violating request accepted
49.3s: GET /notifications: Undocumented status code
50.4s: GET /orgs: API accepts requests without authentication
50.6s: GET /orgs: Schema-violating request accepted
53.8s: GET /orgs/{org}/blocks: Undocumented status code
58.1s: GET /repos/issues/search: API accepts requests without authentication
58.4s: GET /repos/issues/search: Response violates schema
58.4s: GET /repos/issues/search: Schema-violating request accepted
59.5s: OPTIONS /repos/issues/search: Allow header mismatch
1m 4s: GET /repos/{owner}/{repo}/actions/runs/{run}/logs: Undocumented Content-Type
1m 7s: GET /repos/{owner}/{repo}/branch_protections: Undocumented status code
1m 7s: GET /repos/{owner}/{repo}/branches: Undocumented status code
1m 13s: GET /repos/{owner}/{repo}/git/commits/{sha}.{diffType}: Undocumented Content-Type
1m 15s: OPTIONS /repos/{owner}/{repo}/hooks/git: Allow header mismatch
1m 17s: OPTIONS /repos/{owner}/{repo}/issues/comments: Allow header mismatch
1m 18s: OPTIONS /repos/{owner}/{repo}/issues/pinned: Allow header mismatch
1m 21s: OPTIONS /repos/{owner}/{repo}/issues/{index}/subscriptions/check: Allow header mismatch
1m 24s: GET /repos/{owner}/{repo}/media/{filepath}: Undocumented Content-Type
1m 25s: GET /repos/{owner}/{repo}/notifications: Undocumented status code
1m 28s: OPTIONS /repos/{owner}/{repo}/pulls/pinned: Allow header mismatch
1m 29s: GET /repos/{owner}/{repo}/pulls/{index}.{diffType}: Undocumented Content-Type
1m 29s: OPTIONS /repos/{owner}/{repo}/pulls/{index}.{diffType}: Allow header mismatch
1m 32s: GET /repos/{owner}/{repo}/raw/{filepath}: Undocumented Content-Type
1m 33s: OPTIONS /repos/{owner}/{repo}/releases/latest: Allow header mismatch
1m 33s: GET /repos/{owner}/{repo}/signing-key.gpg: Undocumented Content-Type
1m 33s: GET /repos/{owner}/{repo}/signing-key.gpg: Undocumented status code
1m 34s: GET /repos/{owner}/{repo}/signing-key.pub: Undocumented Content-Type
1m 34s: GET /repos/{owner}/{repo}/signing-key.pub: Undocumented status code
1m 35s: GET /repos/{owner}/{repo}/tag_protections: Undocumented status code
1m 38s: GET /settings/api: API accepts requests without authentication
1m 38s: GET /settings/attachment: API accepts requests without authentication
1m 39s: GET /settings/repository: API accepts requests without authentication
1m 39s: GET /settings/ui: API accepts requests without authentication
1m 39s: GET /signing-key.gpg: Undocumented Content-Type
1m 39s: GET /signing-key.gpg: Undocumented status code
1m 39s: GET /signing-key.pub: Undocumented Content-Type
1m 39s: GET /signing-key.pub: Undocumented status code
1m 39s: GET /token: Undocumented status code
1m 39s: GET /topics/search: API accepts requests without authentication
1m 40s: GET /topics/search: Schema-violating request accepted
1m 40s: GET /user/actions/jobs: Schema-valid request rejected
1m 40s: GET /user/actions/jobs: Schema-violating request accepted
1m 41s: GET /user/actions/runners: Schema-violating request accepted
1m 41s: GET /user/actions/runs: Schema-valid request rejected
1m 41s: GET /user/actions/runs: Schema-violating request accepted
1m 41s: GET /user/actions/variables: Schema-violating request accepted
1m 42s: GET /user/applications/oauth2: Schema-violating request accepted
1m 42s: GET /user/blocks: Schema-violating request accepted
1m 43s: GET /user/followers: Schema-violating request accepted
1m 43s: GET /user/following: Schema-violating request accepted
1m 44s: GET /user/gpg_keys: Schema-violating request accepted
1m 44s: GET /user/hooks: Schema-violating request accepted
1m 45s: GET /user/keys: Schema-violating request accepted
1m 45s: GET /user/orgs: Schema-violating request accepted
1m 46s: GET /user/projects: Schema-violating request accepted
1m 46s: GET /user/repos: Schema-violating request accepted
1m 47s: GET /user/starred: Schema-violating request accepted
1m 47s: GET /user/stopwatches: Schema-violating request accepted
1m 48s: GET /user/subscriptions: Schema-violating request accepted
1m 48s: GET /user/teams: Schema-violating request accepted
1m 49s: GET /user/times: Schema-violating request accepted
1m 49s: GET /user/times: Undocumented status code
1m 49s: GET /users/search: API accepts requests without authentication
1m 50s: GET /users/search: Schema-violating request accepted
1m 50s: GET /version: API accepts requests without authentication
1m 54s: PATCH /user/settings: Undocumented status code
1m 54s: PATCH /user/settings: Schema-violating request accepted
1m 55s: DELETE /admin/unadopted/{owner}/{repo}: Undocumented status code
2m 2s: DELETE /token: Undocumented status code
2m 3s: DELETE /user/avatar: Missing Content-Type header
2m 5s: DELETE /user/emails: Missing Content-Type header
2m 5s: DELETE /user/emails: Undocumented status code
2m 5s: DELETE /user/emails: Schema-violating request accepted
2m 5s: POST /org/{org}/repos: Schema-valid request rejected
2m 6s: POST /org/{org}/repos: Server error on undeclared request Content-Type
2m 8s: POST /orgs/{org}/repos: Server error on undeclared request Content-Type
2m 8s: POST /user/repos: Schema-valid request rejected
2m 9s: POST /user/repos: Server error on undeclared request Content-Type
2m 11s: GET /gitignore/templates/{name}: API accepts requests without authentication
2m 11s: GET /licenses/{name}: API accepts requests without authentication
2m 14s: POST /repos/{owner}/{repo}/actions/workflows/{workflow_id}/dispatches: Server error on undeclared request Content-Type
2m 19s: POST /repos/{owner}/{repo}/branch_protections: Server error on undeclared request Content-Type
2m 20s: POST /repos/{owner}/{repo}/pulls/{index}/reviews: Server error on undeclared request Content-Type
2m 25s: POST /admin/users: Schema-valid request rejected
2m 26s: POST /admin/users: Server error on undeclared request Content-Type
2m 26s: POST /admin/users/{username}/badges: Undocumented status code
2m 26s: POST /admin/users/{username}/badges: Schema-valid request rejected
2m 26s: POST /admin/users/{username}/keys: Undocumented status code
2m 27s: POST /admin/users/{username}/keys: Server error on undeclared request Content-Type
2m 27s: POST /admin/users/{username}/orgs: Undocumented status code
2m 27s: OPTIONS /admin/users/{username}/orgs: Allow header mismatch
2m 28s: POST /admin/users/{username}/orgs: Server error on undeclared request Content-Type
2m 28s: POST /admin/users/{username}/rename: Undocumented status code
2m 28s: POST /admin/users/{username}/rename: Server error on undeclared request Content-Type
2m 29s: POST /admin/users/{username}/repos: Server error on undeclared request Content-Type
2m 29s: POST /orgs/{org}/actions/variables/{variablename}: Undocumented status code
2m 30s: POST /orgs/{org}/actions/variables/{variablename}: Server error on undeclared request Content-Type
2m 30s: POST /orgs/{org}/projects/{id}/columns: Server error on undeclared request Content-Type
2m 30s: OPTIONS /orgs/{org}/projects/{id}/columns/move: Allow header mismatch
2m 31s: POST /orgs/{org}/projects/{id}/columns/move: Server error on undeclared request Content-Type
2m 31s: POST /orgs/{org}/projects/{id}/columns/{column_id}/default: Server error on undeclared request Content-Type
2m 32s: POST /orgs/{org}/projects/{id}/columns/{column_id}/issues/{issue_id}: Server error on undeclared request Content-Type
2m 32s: POST /orgs/{org}/projects/{id}/issues/{issue_id}/move: Server error on undeclared request Content-Type
2m 32s: POST /packages/{owner}/{type}/{name}/-/link/{repo_name}: Server error on undeclared request Content-Type
2m 33s: POST /packages/{owner}/{type}/{name}/-/unlink: Server error on undeclared request Content-Type
2m 33s: POST /repos/migrate: Schema-valid request rejected
2m 35s: POST /repos/migrate: Server error on undeclared request Content-Type
2m 35s: POST /repos/{owner}/{repo}/actions/runs/{run}/jobs/{job_id}/rerun: Server error on undeclared request Content-Type
2m 35s: POST /repos/{owner}/{repo}/actions/variables/{variablename}: Undocumented status code
2m 36s: POST /repos/{owner}/{repo}/actions/variables/{variablename}: Server error on undeclared request Content-Type
2m 36s: POST /repos/{owner}/{repo}/hooks/{id}/tests: Server error on undeclared request Content-Type
2m 36s: POST /repos/{owner}/{repo}/issues/comments/{id}/assets: Server error on undeclared request Content-Type
2m 37s: POST /repos/{owner}/{repo}/issues/comments/{id}/reactions: Server error on undeclared request Content-Type
2m 37s: POST /repos/{owner}/{repo}/issues/{index}/times: Server error on undeclared request Content-Type
2m 38s: POST /repos/{owner}/{repo}/projects/{id}/columns: Server error on undeclared request Content-Type
2m 38s: OPTIONS /repos/{owner}/{repo}/projects/{id}/columns/move: Allow header mismatch
2m 38s: POST /repos/{owner}/{repo}/projects/{id}/columns/move: Server error on undeclared request Content-Type
2m 39s: POST /repos/{owner}/{repo}/projects/{id}/columns/{column_id}/default: Server error on undeclared request Content-Type
2m 39s: POST /repos/{owner}/{repo}/projects/{id}/columns/{column_id}/issues/{issue_id}: Server error on undeclared request Content-Type
2m 40s: POST /repos/{owner}/{repo}/projects/{id}/issues/{issue_id}/move: Server error on undeclared request Content-Type
2m 40s: OPTIONS /repos/{owner}/{repo}/pulls/comments/{id}/resolve: Allow header mismatch
2m 40s: POST /repos/{owner}/{repo}/pulls/comments/{id}/resolve: Server error on undeclared request Content-Type
2m 40s: OPTIONS /repos/{owner}/{repo}/pulls/comments/{id}/unresolve: Allow header mismatch
2m 41s: POST /repos/{owner}/{repo}/pulls/comments/{id}/unresolve: Server error on undeclared request Content-Type
2m 41s: OPTIONS /repos/{owner}/{repo}/pulls/{index}/comments/{id}/replies: Allow header mismatch
2m 41s: POST /repos/{owner}/{repo}/pulls/{index}/comments/{id}/replies: Server error on undeclared request Content-Type
2m 42s: POST /repos/{owner}/{repo}/pulls/{index}/reviews/{id}: Server error on undeclared request Content-Type
2m 42s: OPTIONS /repos/{owner}/{repo}/pulls/{index}/reviews/{id}/dismissals: Allow header mismatch
2m 42s: POST /repos/{owner}/{repo}/pulls/{index}/reviews/{id}/dismissals: Server error on undeclared request Content-Type
2m 43s: OPTIONS /repos/{owner}/{repo}/pulls/{index}/reviews/{id}/undismissals: Allow header mismatch
2m 43s: POST /repos/{owner}/{repo}/pulls/{index}/reviews/{id}/undismissals: Server error on undeclared request Content-Type
2m 43s: POST /repos/{owner}/{repo}/push_mirrors: Server error on undeclared request Content-Type
2m 44s: POST /repos/{owner}/{repo}/releases: Server error on undeclared request Content-Type
2m 45s: POST /repos/{owner}/{repo}/releases/{id}/assets: Server error on undeclared request Content-Type
2m 45s: POST /repos/{owner}/{repo}/tags: Server error on undeclared request Content-Type
2m 45s: POST /repos/{owner}/{repo}/transfer: Server error on undeclared request Content-Type
2m 45s: POST /user/actions/variables/{variablename}: Schema-valid request rejected
2m 45s: POST /user/actions/variables/{variablename}: Undocumented status code
2m 46s: POST /user/actions/variables/{variablename}: Server error on undeclared request Content-Type
2m 46s: POST /user/projects/{id}/columns: Schema-valid request rejected
2m 46s: POST /user/projects/{id}/columns: Server error on undeclared request Content-Type
2m 46s: OPTIONS /user/projects/{id}/columns/move: Allow header mismatch
2m 47s: POST /user/projects/{id}/columns/move: Server error on undeclared request Content-Type
2m 47s: POST /user/projects/{id}/columns/{column_id}/default: Server error on undeclared request Content-Type
2m 48s: POST /user/projects/{id}/columns/{column_id}/issues/{issue_id}: Server error on undeclared request Content-Type
2m 48s: POST /user/projects/{id}/issues/{issue_id}/move: Schema-valid request rejected
2m 49s: POST /user/projects/{id}/issues/{issue_id}/move: Server error on undeclared request Content-Type
2m 49s: POST /users/{username}/tokens: Server error on undeclared request Content-Type
2m 51s: PUT /user/actions/secrets/{secretname}: Schema-valid request rejected
2m 51s: PUT /user/actions/secrets/{secretname}: Undocumented status code
2m 52s: PUT /user/actions/variables/{variablename}: Schema-valid request rejected
2m 52s: PUT /user/actions/variables/{variablename}: Undocumented status code
2m 53s: GET /admin/hooks/{id}: Undocumented status code
2m 53s: GET /admin/users: Schema-violating request accepted
2m 59s: GET /repos/search: API accepts requests without authentication
3m: GET /repos/search: Schema-violating request accepted
3m 11s: GET /teams/{id}/activities/feeds: Schema-violating request accepted
3m 12s: GET /teams/{id}/members: Schema-violating request accepted
3m 12s: GET /teams/{id}/repos: Schema-violating request accepted
3m 14s: GET /user/hooks/{id}: Undocumented status code
3m 18s: GET /users/{username}/following: Schema-violating request accepted
3m 20s: GET /users/{username}/projects: API accepts requests without authentication
3m 20s: GET /users/{username}/projects: Schema-violating request accepted
3m 22s: GET /users/{username}/tokens: Undocumented status code
3m 22s: PATCH /admin/hooks/{id}: Server error
3m 22s: PATCH /admin/hooks/{id}: Undocumented status code
3m 23s: PATCH /admin/hooks/{id}: Undocumented status code
3m 23s: PATCH /admin/users/{username}: Undocumented status code
3m 48s: PATCH /teams/{id}: Undocumented status code
3m 49s: PATCH /teams/{id}: Schema-violating request accepted
3m 50s: PATCH /user/applications/oauth2/{id}: Schema-valid request rejected
3m 50s: PATCH /user/applications/oauth2/{id}: Undocumented status code
3m 51s: PATCH /user/hooks/{id}: Undocumented status code
3m 51s: PATCH /user/hooks/{id}: Undocumented status code
3m 52s: PATCH /user/projects/{id}: Schema-valid request rejected
3m 52s: PATCH /user/projects/{id}/columns/{column_id}: Schema-valid request rejected
3m 53s: DELETE /admin/hooks/{id}: Undocumented status code
3m 54s: DELETE /admin/users/{username}: Missing Content-Type header
3m 54s: DELETE /admin/users/{username}/badges: Undocumented status code
4m 4s: DELETE /teams/{id}: Missing Content-Type header
4m 4s: DELETE /teams/{id}: Unexpected response to a request without authentication
4m 5s: DELETE /user/gpg_keys/{id}: Missing Content-Type header
4m 6s: DELETE /user/hooks/{id}: Undocumented status code
Fuzzing46m 51s in 6 passes, 766 found
4m 14s: POST /markdown: Schema-valid request rejected
4m 14s: POST /markdown: Undocumented Content-Type
4m 17s: POST /markup: Schema-valid request rejected
4m 17s: POST /markup: Undocumented Content-Type
4m 23s: POST /orgs/{org}/avatar: Schema-valid request rejected
4m 23s: POST /orgs/{org}/avatar: Undocumented status code
4m 24s: POST /orgs/{org}/avatar: Schema-valid request rejected
4m 24s: POST /orgs/{org}/avatar: Undocumented status code
4m 25s: POST /orgs/{org}/hooks: Schema-valid request rejected
4m 25s: POST /orgs/{org}/hooks: Undocumented status code
4m 30s: POST /orgs/{org}/projects: Schema-valid request rejected
4m 33s: POST /orgs/{org}/rename: Schema-valid request rejected
4m 33s: POST /orgs/{org}/rename: Missing Content-Type header
4m 34s: POST /orgs/{org}/rename: Undocumented status code
4m 37s: POST /orgs/{org}/teams: Schema-valid request rejected
4m 37s: POST /orgs/{org}/teams: Undocumented status code
4m 38s: POST /orgs/{org}/teams: Server error
4m 38s: POST /orgs/{org}/teams: Undocumented status code
4m 50s: POST /repos/{owner}/{repo}/avatar: Schema-valid request rejected
4m 50s: POST /repos/{owner}/{repo}/avatar: Undocumented status code
4m 50s: POST /repos/{owner}/{repo}/avatar: Schema-valid request rejected
4m 50s: POST /repos/{owner}/{repo}/avatar: Undocumented status code
4m 52s: POST /repos/{owner}/{repo}/branch_protections/priority: Missing Content-Type header
4m 53s: POST /repos/{owner}/{repo}/branch_protections/priority: Schema-valid request rejected
4m 54s: POST /repos/{owner}/{repo}/branches: Schema-valid request rejected
4m 54s: POST /repos/{owner}/{repo}/branches: Undocumented status code
4m 55s: POST /repos/{owner}/{repo}/branches: Response violates schema
4m 58s: POST /repos/{owner}/{repo}/contents: Response violates schema
5m 2s: POST /repos/{owner}/{repo}/contents/{filepath}: Response violates schema
5m 2s: POST /repos/{owner}/{repo}/contents/{filepath}: Schema-valid request rejected
5m 5s: POST /repos/{owner}/{repo}/contents/{filepath}: Schema-violating request accepted
5m 5s: POST /repos/{owner}/{repo}/diffpatch: Server error
5m 5s: POST /repos/{owner}/{repo}/diffpatch: Undocumented status code
5m 5s: POST /repos/{owner}/{repo}/diffpatch: Schema-valid request rejected
5m 5s: POST /repos/{owner}/{repo}/diffpatch: Undocumented status code
5m 7s: POST /repos/{owner}/{repo}/file-contents: Schema-valid request rejected
5m 7s: POST /repos/{owner}/{repo}/file-contents: Undocumented status code
5m 7s: POST /repos/{owner}/{repo}/file-contents: Response violates schema
5m 7s: POST /repos/{owner}/{repo}/file-contents: API accepts requests without authentication
5m 8s: POST /repos/{owner}/{repo}/file-contents: Response violates schema
5m 10s: POST /repos/{owner}/{repo}/forks: Schema-valid request rejected
5m 11s: POST /repos/{owner}/{repo}/forks: Server error
5m 11s: POST /repos/{owner}/{repo}/forks: Undocumented status code
5m 12s: POST /repos/{owner}/{repo}/hooks: Schema-valid request rejected
5m 12s: POST /repos/{owner}/{repo}/hooks: Undocumented status code
5m 14s: POST /repos/{owner}/{repo}/issues: Response violates schema
5m 15s: POST /repos/{owner}/{repo}/issues: Schema-valid request rejected
5m 19s: POST /repos/{owner}/{repo}/issues/{index}/assets: Schema-valid request rejected
5m 21s: POST /repos/{owner}/{repo}/issues/{index}/assignees: Response violates schema
5m 21s: POST /repos/{owner}/{repo}/issues/{index}/assignees: Schema-valid request rejected
5m 23s: POST /repos/{owner}/{repo}/issues/{index}/blocks: Undocumented status code
5m 23s: POST /repos/{owner}/{repo}/issues/{index}/blocks: Schema-valid request rejected
5m 25s: POST /repos/{owner}/{repo}/issues/{index}/comments: Server error
5m 25s: POST /repos/{owner}/{repo}/issues/{index}/comments: Undocumented status code
5m 25s: POST /repos/{owner}/{repo}/issues/{index}/comments: Schema-valid request rejected
5m 25s: POST /repos/{owner}/{repo}/issues/{index}/comments: Undocumented status code
5m 29s: POST /repos/{owner}/{repo}/issues/{index}/deadline: Schema-valid request rejected
5m 29s: POST /repos/{owner}/{repo}/issues/{index}/deadline: Undocumented status code
5m 31s: POST /repos/{owner}/{repo}/issues/{index}/dependencies: Schema-valid request rejected
5m 31s: POST /repos/{owner}/{repo}/issues/{index}/dependencies: Undocumented status code
5m 34s: POST /repos/{owner}/{repo}/issues/{index}/labels: Schema-valid request rejected
5m 34s: POST /repos/{owner}/{repo}/issues/{index}/labels: Undocumented status code
5m 34s: POST /repos/{owner}/{repo}/issues/{index}/labels: Schema-valid request rejected
5m 34s: POST /repos/{owner}/{repo}/issues/{index}/labels: Undocumented status code
5m 36s: POST /repos/{owner}/{repo}/issues/{index}/pin: Missing Content-Type header
5m 36s: POST /repos/{owner}/{repo}/issues/{index}/pin: Server error
5m 36s: POST /repos/{owner}/{repo}/issues/{index}/pin: Undocumented status code
5m 38s: POST /repos/{owner}/{repo}/issues/{index}/reactions: Schema-valid request rejected
5m 38s: POST /repos/{owner}/{repo}/issues/{index}/reactions: Undocumented status code
5m 40s: POST /repos/{owner}/{repo}/issues/{index}/stopwatch/start: Missing Content-Type header
5m 42s: POST /repos/{owner}/{repo}/issues/{index}/stopwatch/stop: Missing Content-Type header
5m 44s: POST /repos/{owner}/{repo}/keys: Schema-valid request rejected
5m 46s: POST /repos/{owner}/{repo}/keys/tokens: Schema-valid request rejected
5m 52s: POST /repos/{owner}/{repo}/merge-upstream: Server error
5m 52s: POST /repos/{owner}/{repo}/merge-upstream: Undocumented Content-Type
5m 52s: POST /repos/{owner}/{repo}/merge-upstream: Undocumented status code
5m 53s: POST /repos/{owner}/{repo}/merge-upstream: Undocumented status code
5m 53s: POST /repos/{owner}/{repo}/merge-upstream: Schema-valid request rejected
5m 54s: POST /repos/{owner}/{repo}/milestones: Response violates schema
5m 55s: POST /repos/{owner}/{repo}/milestones: Undocumented status code
5m 56s: POST /repos/{owner}/{repo}/milestones: Schema-valid request rejected
5m 57s: POST /repos/{owner}/{repo}/mirror-sync: Schema-valid request rejected
5m 57s: POST /repos/{owner}/{repo}/mirror-sync: Undocumented status code
5m 59s: POST /repos/{owner}/{repo}/projects: Schema-valid request rejected
6m 2s: POST /repos/{owner}/{repo}/pulls: Schema-valid request rejected
6m 4s: POST /repos/{owner}/{repo}/pulls/{index}/merge: Schema-valid request rejected
6m 4s: POST /repos/{owner}/{repo}/pulls/{index}/merge: Undocumented status code
6m 9s: POST /repos/{owner}/{repo}/push_mirrors-sync: Missing Content-Type header
6m 11s: POST /repos/{owner}/{repo}/statuses/{sha}: Response violates schema
6m 11s: POST /repos/{owner}/{repo}/statuses/{sha}: Server error
6m 11s: POST /repos/{owner}/{repo}/statuses/{sha}: Undocumented status code
6m 12s: POST /repos/{owner}/{repo}/statuses/{sha}: Schema-valid request rejected
6m 12s: POST /repos/{owner}/{repo}/statuses/{sha}: Undocumented status code
6m 15s: POST /repos/{owner}/{repo}/tag_protections: Schema-valid request rejected
6m 15s: POST /repos/{owner}/{repo}/tag_protections: Undocumented status code
6m 15s: POST /repos/{owner}/{repo}/tag_protections: Schema-valid request rejected
6m 16s: POST /repos/{owner}/{repo}/tag_protections: Undocumented status code
6m 20s: POST /repos/{owner}/{repo}/wiki/new: Schema-valid request rejected
6m 20s: POST /repos/{owner}/{repo}/wiki/new: Undocumented status code
6m 20s: POST /repos/{owner}/{repo}/wiki/new: Schema-valid request rejected
6m 27s: POST /user/applications/oauth2: Schema-valid request rejected
6m 31s: POST /user/avatar: Schema-valid request rejected
6m 31s: POST /user/avatar: Undocumented status code
6m 45s: PUT /orgs/{org}/public_members/{username}: Missing Content-Type header
6m 48s: PUT /repos/{owner}/{repo}/collaborators/{collaborator}: Schema-valid request rejected
6m 51s: PUT /repos/{owner}/{repo}/issues/{index}/labels: Schema-valid request rejected
6m 51s: PUT /repos/{owner}/{repo}/issues/{index}/labels: Undocumented status code
6m 51s: PUT /repos/{owner}/{repo}/issues/{index}/labels: Schema-valid request rejected
6m 51s: PUT /repos/{owner}/{repo}/issues/{index}/labels: Undocumented status code
6m 52s: PUT /repos/{owner}/{repo}/issues/{index}/lock: Missing Content-Type header
6m 53s: PUT /repos/{owner}/{repo}/issues/{index}/lock: Schema-valid request rejected
6m 53s: PUT /repos/{owner}/{repo}/issues/{index}/lock: Undocumented status code
6m 56s: PUT /repos/{owner}/{repo}/notifications: Schema-violating request accepted
6m 56s: PUT /repos/{owner}/{repo}/notifications: Undocumented status code
6m 59s: PUT /repos/{owner}/{repo}/subscription: Undocumented status code
6m 59s: PUT /repos/{owner}/{repo}/topics: Missing Content-Type header
6m 59s: PUT /repos/{owner}/{repo}/topics: Schema-valid request rejected
7m 2s: PUT /repos/{owner}/{repo}/topics/{topic}: Missing Content-Type header
7m 2s: PUT /repos/{owner}/{repo}/topics/{topic}: Schema-valid request rejected
7m 4s: PUT /user/following/{username}: Missing Content-Type header
7m 6s: PUT /user/starred/{owner}/{repo}: Missing Content-Type header
7m 8s: GET /admin/actions/jobs: Schema-valid request rejected
7m 11s: GET /admin/actions/runs: Undocumented status code
7m 34s: GET /orgs/{org}: API accepts requests without authentication
7m 38s: GET /orgs/{org}/actions/jobs: Schema-valid request rejected
7m 38s: GET /orgs/{org}/actions/jobs: Schema-violating request accepted
7m 41s: GET /orgs/{org}/actions/runners: Undocumented status code
7m 43s: GET /orgs/{org}/actions/runs: Schema-valid request rejected
7m 44s: GET /orgs/{org}/actions/runs: Server error
7m 44s: GET /orgs/{org}/actions/runs: Undocumented status code
7m 44s: GET /orgs/{org}/actions/runs: Schema-violating request accepted
7m 48s: GET /orgs/{org}/actions/secrets: Schema-violating request accepted
7m 53s: GET /orgs/{org}/activities/feeds: API accepts requests without authentication
7m 54s: GET /orgs/{org}/activities/feeds: Schema-violating request accepted
7m 55s: GET /orgs/{org}/activities/feeds: Undocumented status code
8m: GET /orgs/{org}/hooks: Schema-violating request accepted
8m 3s: GET /orgs/{org}/labels: API accepts requests without authentication
8m 4s: GET /orgs/{org}/labels: Schema-violating request accepted
8m 10s: GET /orgs/{org}/projects: API accepts requests without authentication
8m 10s: GET /orgs/{org}/projects: Schema-violating request accepted
8m 13s: GET /orgs/{org}/public_members: API accepts requests without authentication
8m 14s: GET /orgs/{org}/public_members: Schema-violating request accepted
8m 16s: GET /orgs/{org}/repos: API accepts requests without authentication
8m 17s: GET /orgs/{org}/repos: Schema-violating request accepted
8m 18s: GET /orgs/{org}/repos: Undocumented status code
8m 20s: GET /orgs/{org}/teams: Response violates schema
8m 21s: GET /orgs/{org}/teams: Schema-violating request accepted
8m 23s: GET /orgs/{org}/teams/search: Response violates schema
8m 26s: GET /repos/issues/search: Schema-valid request rejected
8m 28s: GET /repos/issues/search: Undocumented status code
8m 29s: GET /repos/{owner}/{repo}/actions/artifacts: API accepts requests without authentication
8m 31s: GET /repos/{owner}/{repo}/actions/jobs: Schema-valid request rejected
8m 31s: GET /repos/{owner}/{repo}/actions/jobs: Schema-valid request rejected
8m 33s: GET /repos/{owner}/{repo}/actions/runners: Schema-violating request accepted
8m 34s: GET /repos/{owner}/{repo}/actions/runs: Schema-valid request rejected
8m 34s: GET /repos/{owner}/{repo}/actions/runs: Server error
8m 34s: GET /repos/{owner}/{repo}/actions/runs: Undocumented status code
8m 35s: GET /repos/{owner}/{repo}/actions/runs: Schema-violating request accepted
8m 38s: GET /repos/{owner}/{repo}/actions/runs/{run}/artifacts: API accepts requests without authentication
8m 48s: GET /repos/{owner}/{repo}/actions/secrets: Schema-violating request accepted
8m 49s: GET /repos/{owner}/{repo}/actions/tasks: API accepts requests without authentication
8m 50s: GET /repos/{owner}/{repo}/actions/tasks: Schema-violating request accepted
8m 55s: GET /repos/{owner}/{repo}/activities/feeds: Response violates schema
8m 55s: GET /repos/{owner}/{repo}/activities/feeds: API accepts requests without authentication
8m 55s: GET /repos/{owner}/{repo}/activities/feeds: Response violates schema
8m 57s: GET /repos/{owner}/{repo}/archive/{archive}: Schema-valid request rejected
8m 57s: GET /repos/{owner}/{repo}/archive/{archive}: Undocumented status code
9m 4s: GET /repos/{owner}/{repo}/branches: Response violates schema
9m 4s: GET /repos/{owner}/{repo}/branches: API accepts requests without authentication
9m 7s: GET /repos/{owner}/{repo}/collaborators: Undocumented status code
9m 8s: GET /repos/{owner}/{repo}/collaborators: Schema-violating request accepted
9m 8s: GET /repos/{owner}/{repo}/collaborators: Undocumented status code
9m 8s: GET /repos/{owner}/{repo}/commits: Response violates schema
9m 8s: GET /repos/{owner}/{repo}/commits: API accepts requests without authentication
9m 8s: GET /repos/{owner}/{repo}/commits: Response violates schema
9m 9s: GET /repos/{owner}/{repo}/commits: Server error
9m 9s: GET /repos/{owner}/{repo}/commits: Undocumented status code
9m 9s: GET /repos/{owner}/{repo}/commits: Schema-violating request accepted
9m 10s: GET /repos/{owner}/{repo}/commits: Response violates schema
9m 11s: GET /repos/{owner}/{repo}/commits: Response violates schema
9m 12s: GET /repos/{owner}/{repo}/commits/{ref}/status: Undocumented status code
9m 18s: GET /repos/{owner}/{repo}/contents: Response violates schema
9m 18s: GET /repos/{owner}/{repo}/contents: API accepts requests without authentication
9m 20s: GET /repos/{owner}/{repo}/contents-ext/{filepath}: Response violates schema
9m 20s: GET /repos/{owner}/{repo}/contents-ext/{filepath}: API accepts requests without authentication
9m 20s: GET /repos/{owner}/{repo}/contents-ext/{filepath}: Schema-valid request rejected
9m 20s: GET /repos/{owner}/{repo}/contents-ext/{filepath}: Undocumented status code
9m 21s: GET /repos/{owner}/{repo}/contents-ext/{filepath}: Undocumented status code
9m 22s: GET /repos/{owner}/{repo}/contents/{filepath}: Response violates schema
9m 22s: GET /repos/{owner}/{repo}/contents/{filepath}: API accepts requests without authentication
9m 26s: GET /repos/{owner}/{repo}/file-contents: Schema-valid request rejected
9m 26s: GET /repos/{owner}/{repo}/file-contents: Undocumented status code
9m 28s: GET /repos/{owner}/{repo}/forks: API accepts requests without authentication
9m 28s: GET /repos/{owner}/{repo}/forks: Schema-violating request accepted
9m 30s: GET /repos/{owner}/{repo}/git/blobs/{sha}: API accepts requests without authentication
9m 30s: GET /repos/{owner}/{repo}/git/blobs/{sha}: Schema-valid request rejected
9m 32s: GET /repos/{owner}/{repo}/git/commits/{sha}.{diffType}: API accepts requests without authentication
9m 32s: GET /repos/{owner}/{repo}/git/commits/{sha}.{diffType}: Server error
9m 32s: GET /repos/{owner}/{repo}/git/commits/{sha}.{diffType}: Undocumented status code
9m 32s: GET /repos/{owner}/{repo}/git/commits/{sha}.{diffType}: JSON deserialization error
9m 32s: GET /repos/{owner}/{repo}/git/commits/{sha}.{diffType}: Missing Content-Type header
9m 35s: GET /repos/{owner}/{repo}/git/notes/{sha}: Undocumented status code
9m 36s: GET /repos/{owner}/{repo}/git/refs: API accepts requests without authentication
9m 38s: GET /repos/{owner}/{repo}/git/tags/{sha}: Schema-valid request rejected
9m 39s: GET /repos/{owner}/{repo}/git/trees/{sha}: API accepts requests without authentication
9m 39s: GET /repos/{owner}/{repo}/git/trees/{sha}: Schema-valid request rejected
9m 40s: GET /repos/{owner}/{repo}/git/trees/{sha}: Response violates schema
9m 42s: GET /repos/{owner}/{repo}/hooks: Undocumented status code
9m 43s: GET /repos/{owner}/{repo}/hooks/git: Undocumented status code
9m 44s: GET /repos/{owner}/{repo}/hooks/git: Undocumented status code
9m 44s: GET /repos/{owner}/{repo}/hooks/git/{id}: Undocumented status code
9m 46s: GET /repos/{owner}/{repo}/hooks/git/{id}: Undocumented status code
9m 46s: GET /repos/{owner}/{repo}/issue_config: API accepts requests without authentication
9m 48s: GET /repos/{owner}/{repo}/issue_config/validate: API accepts requests without authentication
9m 50s: GET /repos/{owner}/{repo}/issue_templates: Response violates schema
9m 50s: GET /repos/{owner}/{repo}/issue_templates: API accepts requests without authentication
9m 52s: GET /repos/{owner}/{repo}/issue_templates: Undocumented status code
9m 52s: GET /repos/{owner}/{repo}/issue_templates: Undocumented status code
9m 52s: GET /repos/{owner}/{repo}/issues: API accepts requests without authentication
9m 54s: GET /repos/{owner}/{repo}/issues/comments: API accepts requests without authentication
9m 56s: GET /repos/{owner}/{repo}/issues/pinned: Response violates schema
9m 56s: GET /repos/{owner}/{repo}/issues/pinned: API accepts requests without authentication
9m 58s: GET /repos/{owner}/{repo}/issues/{index}: Response violates schema
9m 58s: GET /repos/{owner}/{repo}/issues/{index}: API accepts requests without authentication
10m: GET /repos/{owner}/{repo}/issues/{index}/assets: API accepts requests without authentication
10m 6s: GET /repos/{owner}/{repo}/issues/{index}/comments: API accepts requests without authentication
10m 7s: GET /repos/{owner}/{repo}/issues/{index}/comments: Server error
10m 7s: GET /repos/{owner}/{repo}/issues/{index}/comments: Undocumented status code
10m 10s: GET /repos/{owner}/{repo}/issues/{index}/labels: API accepts requests without authentication
10m 12s: GET /repos/{owner}/{repo}/issues/{index}/reactions: Response violates schema
10m 12s: GET /repos/{owner}/{repo}/issues/{index}/reactions: API accepts requests without authentication
10m 14s: GET /repos/{owner}/{repo}/issues/{index}/subscriptions: API accepts requests without authentication
10m 14s: GET /repos/{owner}/{repo}/issues/{index}/subscriptions: Schema-violating request accepted
10m 17s: GET /repos/{owner}/{repo}/issues/{index}/timeline: Response violates schema
10m 17s: GET /repos/{owner}/{repo}/issues/{index}/timeline: API accepts requests without authentication
10m 18s: GET /repos/{owner}/{repo}/issues/{index}/timeline: Response violates schema
10m 18s: GET /repos/{owner}/{repo}/issues/{index}/timeline: Undocumented status code
10m 20s: GET /repos/{owner}/{repo}/issues/{index}/times: Response violates schema
10m 21s: GET /repos/{owner}/{repo}/labels: API accepts requests without authentication
10m 23s: GET /repos/{owner}/{repo}/languages: API accepts requests without authentication
10m 25s: GET /repos/{owner}/{repo}/licenses: API accepts requests without authentication
10m 27s: GET /repos/{owner}/{repo}/media/{filepath}: Undocumented Content-Type
10m 27s: GET /repos/{owner}/{repo}/media/{filepath}: API accepts requests without authentication
10m 29s: GET /repos/{owner}/{repo}/milestones: Response violates schema
10m 29s: GET /repos/{owner}/{repo}/milestones: API accepts requests without authentication
10m 29s: GET /repos/{owner}/{repo}/milestones: Schema-violating request accepted
10m 31s: GET /repos/{owner}/{repo}/new_pin_allowed: API accepts requests without authentication
10m 33s: GET /repos/{owner}/{repo}/notifications: Schema-violating request accepted
10m 35s: GET /repos/{owner}/{repo}/notifications: Undocumented status code
10m 35s: GET /repos/{owner}/{repo}/projects: API accepts requests without authentication
10m 35s: GET /repos/{owner}/{repo}/projects: Schema-violating request accepted
10m 37s: GET /repos/{owner}/{repo}/pulls: API accepts requests without authentication
10m 37s: GET /repos/{owner}/{repo}/pulls: Schema-valid request rejected
10m 37s: GET /repos/{owner}/{repo}/pulls: Undocumented status code
10m 38s: GET /repos/{owner}/{repo}/pulls: Schema-violating request accepted
10m 39s: GET /repos/{owner}/{repo}/pulls/pinned: API accepts requests without authentication
10m 53s: GET /repos/{owner}/{repo}/push_mirrors: Schema-violating request accepted
10m 54s: GET /repos/{owner}/{repo}/raw/{filepath}: Undocumented Content-Type
10m 54s: GET /repos/{owner}/{repo}/raw/{filepath}: API accepts requests without authentication
10m 55s: GET /repos/{owner}/{repo}/raw/{filepath}: Undocumented status code
10m 56s: GET /repos/{owner}/{repo}/releases: API accepts requests without authentication
10m 56s: GET /repos/{owner}/{repo}/releases: Schema-violating request accepted
11m 5s: GET /repos/{owner}/{repo}/stargazers: API accepts requests without authentication
11m 7s: GET /repos/{owner}/{repo}/statuses/{sha}: Response violates schema
11m 7s: GET /repos/{owner}/{repo}/statuses/{sha}: API accepts requests without authentication
11m 7s: GET /repos/{owner}/{repo}/statuses/{sha}: Schema-violating request accepted
11m 9s: GET /repos/{owner}/{repo}/subscribers: API accepts requests without authentication
11m 9s: GET /repos/{owner}/{repo}/subscribers: Schema-violating request accepted
11m 14s: GET /repos/{owner}/{repo}/tags: API accepts requests without authentication
11m 16s: GET /repos/{owner}/{repo}/teams: Schema-valid request rejected
11m 16s: GET /repos/{owner}/{repo}/teams: Undocumented status code
11m 18s: GET /repos/{owner}/{repo}/times: Response violates schema
11m 22s: GET /repos/{owner}/{repo}/topics: API accepts requests without authentication
11m 26s: GET /repos/{owner}/{repo}/wiki/pages: API accepts requests without authentication
11m 28s: GET /repos/{owner}/{repo}/wiki/pages: Schema-violating request accepted
11m 45s: GET /user/actions/jobs: Schema-valid request rejected
11m 48s: GET /user/actions/runs: Server error
11m 48s: GET /user/actions/runs: Undocumented status code
11m 58s: GET /user/following: Response violates schema
12m 7s: GET /user/orgs: Undocumented status code
12m 14s: GET /user/starred/{owner}/{repo}: Missing Content-Type header
12m 17s: GET /user/stopwatches: Undocumented status code
12m 20s: GET /user/times: Response violates schema
12m 26s: PATCH /orgs/{org}: Undocumented status code
12m 27s: PATCH /orgs/{org}: Schema-valid request rejected
12m 30s: PATCH /repos/{owner}/{repo}/hooks/git/{id}: Undocumented status code
12m 32s: PATCH /repos/{owner}/{repo}/issues/{index}/pin/{position}: Missing Content-Type header
12m 33s: PATCH /repos/{owner}/{repo}/issues/{index}/pin/{position}: Server error
12m 33s: PATCH /repos/{owner}/{repo}/issues/{index}/pin/{position}: Undocumented status code
12m 36s: PATCH /repos/{owner}/{repo}/wiki/page/{pageName}: Schema-valid request rejected
12m 36s: PATCH /repos/{owner}/{repo}/wiki/page/{pageName}: Undocumented status code
12m 36s: PATCH /repos/{owner}/{repo}/wiki/page/{pageName}: Schema-valid request rejected
12m 40s: PATCH /user/settings: Schema-valid request rejected
12m 45s: DELETE /orgs/{org}: Missing Content-Type header
12m 45s: DELETE /orgs/{org}/avatar: Undocumented Content-Type
12m 47s: DELETE /orgs/{org}/repos: Undocumented Content-Type
12m 49s: DELETE /repos/{owner}/{repo}/avatar: Missing Content-Type header
12m 51s: DELETE /repos/{owner}/{repo}/contents/{filepath}: Schema-valid request rejected
12m 53s: DELETE /repos/{owner}/{repo}/hooks/git/{id}: Undocumented status code
12m 54s: DELETE /repos/{owner}/{repo}/hooks/git/{id}: Undocumented status code
12m 55s: DELETE /repos/{owner}/{repo}/issues/{index}: Missing Content-Type header
12m 55s: DELETE /repos/{owner}/{repo}/issues/{index}: Undocumented Content-Type
12m 58s: DELETE /repos/{owner}/{repo}/issues/{index}/blocks: Undocumented status code
13m 1s: DELETE /repos/{owner}/{repo}/issues/{index}/dependencies: Undocumented status code
13m 6s: DELETE /repos/{owner}/{repo}/issues/{index}/pin: Undocumented Content-Type
13m 17s: DELETE /repos/{owner}/{repo}/subscription: Missing Content-Type header
13m 22s: DELETE /user/avatar: Undocumented status code
13m 22s: DELETE /user/avatar: Undocumented status code
13m 24s: DELETE /user/starred/{owner}/{repo}: Missing Content-Type header
13m 28s: POST /orgs/{org}/repos: Undocumented Content-Type
13m 29s: POST /orgs/{org}/repos: Undocumented status code
13m 32s: POST /user/repos: Schema-valid request rejected
13m 34s: PUT /repos/{owner}/{repo}/contents/{filepath}: Schema-valid request rejected
13m 34s: PUT /repos/{owner}/{repo}/contents/{filepath}: Response violates schema
13m 44s: GET /orgs/{org}/public_members/{username}: Undocumented Content-Type
13m 46s: GET /repos/{owner}/{repo}/actions/artifacts/{artifact_id}: Undocumented Content-Type
13m 51s: GET /repos/{owner}/{repo}/branches/{branch}: Undocumented status code
13m 51s: GET /repos/{owner}/{repo}/collaborators/{collaborator}: Schema-valid request rejected
13m 55s: GET /repos/{owner}/{repo}/git/commits/{sha}: Response violates schema
13m 55s: GET /repos/{owner}/{repo}/git/commits/{sha}: API accepts requests without authentication
13m 55s: GET /repos/{owner}/{repo}/git/commits/{sha}: Schema-valid request rejected
13m 55s: GET /repos/{owner}/{repo}/git/commits/{sha}: Response violates schema
13m 56s: GET /repos/{owner}/{repo}/git/commits/{sha}: Response violates schema
13m 56s: GET /repos/{owner}/{repo}/git/commits/{sha}: Response violates schema
14m 5s: DELETE /orgs/{org}/public_members/{username}: Undocumented Content-Type
14m 5s: DELETE /repos/{owner}/{repo}/collaborators/{collaborator}: Schema-valid request rejected
14m 9s: DELETE /repos/{owner}/{repo}/topics/{topic}: Missing Content-Type header
14m 9s: DELETE /user/following/{username}: Missing Content-Type header
14m 9s: POST /repos/{owner}/{repo}/actions/workflows/{workflow_id}/dispatches: Schema-valid request rejected
14m 11s: POST /repos/{owner}/{repo}/branch_protections: Response violates schema
14m 11s: POST /repos/{owner}/{repo}/branch_protections: Schema-valid request rejected
14m 11s: POST /repos/{owner}/{repo}/branch_protections: Undocumented status code
14m 11s: POST /repos/{owner}/{repo}/branch_protections: Schema-valid request rejected
14m 20s: PUT /repos/{owner}/{repo}/branches/{branch}: Schema-valid request rejected
14m 24s: GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/runs: Schema-valid request rejected
14m 25s: GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/runs: Schema-violating request accepted
14m 29s: PATCH /repos/{owner}/{repo}/branches/{branch}: Schema-valid request rejected
14m 34s: DELETE /repos/{owner}/{repo}/branches/{branch}: Undocumented status code
14m 35s: PATCH /repos/{owner}/{repo}/pulls/{index}: Undocumented Content-Type
14m 40s: POST /admin/users/{username}/badges: Undocumented status code
14m 41s: POST /admin/users/{username}/badges: Missing Content-Type header
14m 43s: POST /admin/users/{username}/keys: Schema-valid request rejected
14m 45s: POST /admin/users/{username}/orgs: Server error
14m 45s: POST /admin/users/{username}/orgs: Undocumented status code
14m 45s: POST /admin/users/{username}/orgs: Schema-valid request rejected
14m 47s: POST /admin/users/{username}/rename: Schema-valid request rejected
14m 50s: POST /admin/users/{username}/repos: Schema-valid request rejected
14m 50s: POST /admin/users/{username}/repos: Response violates schema
14m 50s: POST /admin/users/{username}/repos: Server error
14m 50s: POST /admin/users/{username}/repos: Undocumented status code
14m 50s: POST /admin/users/{username}/repos: Schema-valid request rejected
14m 54s: POST /orgs/{org}/actions/variables/{variablename}: Undocumented Content-Type
14m 56s: POST /orgs/{org}/projects/{id}/columns: Undocumented Content-Type
14m 59s: POST /orgs/{org}/projects/{id}/columns/move: Undocumented Content-Type
15m 1s: POST /orgs/{org}/projects/{id}/columns/{column_id}/default: Undocumented Content-Type
15m 3s: POST /orgs/{org}/projects/{id}/columns/{column_id}/issues/{issue_id}: Undocumented Content-Type
15m 6s: POST /orgs/{org}/projects/{id}/issues/{issue_id}/move: Undocumented Content-Type
15m 17s: POST /repos/{owner}/{repo}/actions/variables/{variablename}: Schema-valid request rejected
15m 17s: POST /repos/{owner}/{repo}/actions/variables/{variablename}: Undocumented status code
15m 17s: POST /repos/{owner}/{repo}/actions/variables/{variablename}: Schema-valid request rejected
15m 18s: POST /repos/{owner}/{repo}/actions/variables/{variablename}: Undocumented Content-Type
15m 23s: POST /repos/{owner}/{repo}/issues/comments/{id}/reactions: Schema-valid request rejected
15m 23s: POST /repos/{owner}/{repo}/issues/comments/{id}/reactions: Undocumented status code
15m 25s: POST /repos/{owner}/{repo}/issues/{index}/times: Schema-valid request rejected
15m 25s: POST /repos/{owner}/{repo}/issues/{index}/times: Undocumented status code
15m 28s: POST /repos/{owner}/{repo}/projects/{id}/columns: Schema-valid request rejected
15m 30s: POST /repos/{owner}/{repo}/projects/{id}/columns/move: Schema-valid request rejected
15m 30s: POST /repos/{owner}/{repo}/projects/{id}/columns/move: Undocumented Content-Type
15m 32s: POST /repos/{owner}/{repo}/projects/{id}/columns/{column_id}/default: Undocumented Content-Type
15m 37s: POST /repos/{owner}/{repo}/projects/{id}/issues/{issue_id}/move: Schema-valid request rejected
15m 44s: POST /repos/{owner}/{repo}/pulls/{index}/comments/{id}/replies: Schema-valid request rejected
15m 47s: POST /repos/{owner}/{repo}/pulls/{index}/reviews/{id}: Undocumented Content-Type
15m 52s: POST /repos/{owner}/{repo}/push_mirrors: Schema-valid request rejected
15m 52s: POST /repos/{owner}/{repo}/push_mirrors: Undocumented status code
15m 53s: POST /repos/{owner}/{repo}/push_mirrors: Schema-valid request rejected
15m 55s: POST /repos/{owner}/{repo}/releases: Schema-valid request rejected
15m 55s: POST /repos/{owner}/{repo}/releases: Server error
15m 55s: POST /repos/{owner}/{repo}/releases: Undocumented status code
15m 58s: POST /repos/{owner}/{repo}/releases/{id}/assets: Server error
15m 58s: POST /repos/{owner}/{repo}/releases/{id}/assets: Undocumented status code
16m 3s: POST /repos/{owner}/{repo}/tags: Server error
16m 3s: POST /repos/{owner}/{repo}/tags: Undocumented status code
16m 3s: POST /repos/{owner}/{repo}/tags: Schema-valid request rejected
16m 7s: POST /user/actions/variables/{variablename}: Schema-valid request rejected
16m 13s: POST /user/projects/{id}/columns/move: Schema-valid request rejected
16m 13s: POST /user/projects/{id}/columns/move: Missing Content-Type header
16m 15s: POST /user/projects/{id}/columns/{column_id}/default: Missing Content-Type header
16m 15s: POST /user/projects/{id}/columns/{column_id}/default: Undocumented status code
16m 26s: POST /users/{username}/tokens: Schema-valid request rejected
16m 26s: POST /users/{username}/tokens: Undocumented status code
16m 28s: PUT /orgs/{org}/actions/secrets/{secretname}: Undocumented Content-Type
16m 30s: PUT /orgs/{org}/actions/variables/{variablename}: Undocumented Content-Type
16m 32s: PUT /orgs/{org}/blocks/{username}: Undocumented Content-Type
16m 34s: PUT /repos/{owner}/{repo}/actions/secrets/{secretname}: Schema-valid request rejected
16m 34s: PUT /repos/{owner}/{repo}/actions/secrets/{secretname}: Undocumented status code
16m 34s: PUT /repos/{owner}/{repo}/actions/secrets/{secretname}: Schema-valid request rejected
16m 36s: PUT /repos/{owner}/{repo}/actions/variables/{variablename}: Schema-valid request rejected
16m 36s: PUT /repos/{owner}/{repo}/actions/variables/{variablename}: Undocumented status code
16m 44s: PUT /user/actions/secrets/{secretname}: Missing Content-Type header
16m 44s: PUT /user/actions/secrets/{secretname}: Schema-valid request rejected
16m 49s: PUT /user/blocks/{username}: Schema-valid request rejected
16m 49s: PUT /user/blocks/{username}: Undocumented status code
16m 49s: PUT /user/blocks/{username}: Undocumented Content-Type
16m 54s: GET /admin/users: Schema-valid request rejected
17m 1s: GET /orgs/{org}/actions/runners/{runner_id}: Undocumented Content-Type
17m 2s: GET /orgs/{org}/actions/runners/{runner_id}: Undocumented status code
17m 2s: GET /orgs/{org}/actions/variables/{variablename}: Undocumented Content-Type
17m 2s: GET /orgs/{org}/actions/variables/{variablename}: Undocumented status code
17m 3s: GET /orgs/{org}/actions/variables/{variablename}: Undocumented status code
17m 4s: GET /orgs/{org}/blocks/{username}: Undocumented Content-Type
17m 5s: GET /orgs/{org}/hooks/{id}: Undocumented Content-Type
17m 7s: GET /orgs/{org}/labels/{id}: Undocumented Content-Type
17m 9s: GET /orgs/{org}/members/{username}: Undocumented Content-Type
17m 10s: GET /orgs/{org}/projects/{id}: Undocumented Content-Type
17m 13s: GET /orgs/{org}/projects/{id}/columns: Undocumented Content-Type
17m 15s: GET /orgs/{org}/projects/{id}/columns/{column_id}: Undocumented Content-Type
17m 17s: GET /orgs/{org}/projects/{id}/columns/{column_id}/issues: Undocumented Content-Type
17m 29s: GET /repos/search: Response violates schema
17m 29s: GET /repos/search: Schema-valid request rejected
17m 31s: GET /repos/{owner}/{repo}: API accepts requests without authentication
17m 32s: GET /repos/{owner}/{repo}: Undocumented status code
17m 40s: GET /repos/{owner}/{repo}/branch_protections/{name}: Response violates schema
17m 45s: GET /repos/{owner}/{repo}/issues/comments/{id}/assets: Undocumented Content-Type
17m 50s: GET /repos/{owner}/{repo}/issues/comments/{id}/reactions: Undocumented status code
17m 57s: GET /repos/{owner}/{repo}/labels/{id}: API accepts requests without authentication
17m 59s: GET /repos/{owner}/{repo}/milestones/{id}: Undocumented status code
18m: GET /repos/{owner}/{repo}/milestones/{id}: Undocumented status code
18m 1s: GET /repos/{owner}/{repo}/projects/{id}: API accepts requests without authentication
18m 10s: GET /repos/{owner}/{repo}/pulls/{index}/reviews/{id}: Undocumented Content-Type
18m 12s: GET /repos/{owner}/{repo}/pulls/{index}/reviews/{id}/comments: Undocumented Content-Type
18m 15s: GET /repos/{owner}/{repo}/releases/{id}: API accepts requests without authentication
18m 17s: GET /repos/{owner}/{repo}/releases/{id}/assets: API accepts requests without authentication
18m 19s: GET /repos/{owner}/{repo}/releases/{id}/assets/{attachment_id}: API accepts requests without authentication
18m 23s: GET /repos/{owner}/{repo}/tag_protections/{id}: Undocumented status code
18m 26s: GET /repos/{owner}/{repo}/teams/{team}: Schema-valid request rejected
18m 27s: GET /repos/{owner}/{repo}/teams/{team}: Undocumented status code
18m 27s: GET /repos/{owner}/{repo}/teams/{team}: Undocumented status code
18m 27s: GET /repositories/{id}: Response violates schema
18m 46s: GET /user/blocks/{username}: Missing Content-Type header
18m 47s: GET /user/blocks/{username}: Undocumented Content-Type
19m 2s: GET /users/{username}: API accepts requests without authentication
19m 4s: GET /users/{username}/activities/feeds: Response violates schema
19m 4s: GET /users/{username}/activities/feeds: API accepts requests without authentication
19m 4s: GET /users/{username}/activities/feeds: Schema-violating request accepted
19m 8s: GET /users/{username}/followers: Schema-violating request accepted
19m 11s: GET /users/{username}/following/{target}: Undocumented Content-Type
19m 13s: GET /users/{username}/gpg_keys: Schema-violating request accepted
19m 15s: GET /users/{username}/heatmap: API accepts requests without authentication
19m 19s: GET /users/{username}/orgs: Schema-violating request accepted
19m 21s: GET /users/{username}/orgs/{org}/permissions: Undocumented Content-Type
19m 26s: GET /users/{username}/repos: API accepts requests without authentication
19m 27s: GET /users/{username}/repos: Schema-violating request accepted
19m 28s: GET /users/{username}/repos: Response violates schema
19m 30s: GET /users/{username}/starred: Schema-violating request accepted
19m 31s: GET /users/{username}/subscriptions: Response violates schema
19m 32s: GET /users/{username}/subscriptions: Schema-violating request accepted
19m 35s: GET /users/{username}/tokens: Schema-violating request accepted
19m 41s: PATCH /admin/users/{username}: Response violates schema
19m 41s: PATCH /admin/users/{username}: Schema-valid request rejected
19m 43s: PATCH /admin/users/{username}: Undocumented status code
19m 47s: PATCH /notifications/threads/{id}: Undocumented status code
19m 47s: PATCH /orgs/{org}/actions/runners/{runner_id}: Undocumented Content-Type
19m 50s: PATCH /orgs/{org}/hooks/{id}: Undocumented Content-Type
19m 51s: PATCH /orgs/{org}/labels/{id}: Undocumented Content-Type
19m 54s: PATCH /orgs/{org}/projects/{id}: Undocumented Content-Type
19m 56s: PATCH /orgs/{org}/projects/{id}/columns/{column_id}: Undocumented Content-Type
20m 1s: PATCH /repos/{owner}/{repo}: Schema-violating request accepted
20m 7s: PATCH /repos/{owner}/{repo}/branch_protections/{name}: Response violates schema
20m 7s: PATCH /repos/{owner}/{repo}/branch_protections/{name}: Schema-violating request accepted
20m 15s: PATCH /repos/{owner}/{repo}/issues/comments/{id}: Schema-valid request rejected
20m 15s: PATCH /repos/{owner}/{repo}/issues/comments/{id}: Undocumented status code
20m 29s: PATCH /repos/{owner}/{repo}/issues/{index}/comments/{id}: Schema-valid request rejected
20m 29s: PATCH /repos/{owner}/{repo}/issues/{index}/comments/{id}: Undocumented status code
20m 42s: PATCH /repos/{owner}/{repo}/projects/{id}: Undocumented Content-Type
20m 53s: PATCH /repos/{owner}/{repo}/releases/{id}: Schema-violating request accepted
21m 13s: PATCH /user/applications/oauth2/{id}: Schema-valid request rejected
21m 14s: PATCH /user/applications/oauth2/{id}: Server error
21m 14s: PATCH /user/applications/oauth2/{id}: Undocumented status code
21m 25s: DELETE /admin/users/{username}: Schema-valid request rejected
21m 27s: DELETE /admin/users/{username}/badges: Schema-valid request rejected
21m 29s: DELETE /admin/users/{username}/keys/{id}: Undocumented Content-Type
21m 31s: DELETE /orgs/{org}/actions/runners/{runner_id}: Undocumented Content-Type
21m 33s: DELETE /orgs/{org}/actions/secrets/{secretname}: Undocumented Content-Type
21m 33s: DELETE /orgs/{org}/actions/variables/{variablename}: Undocumented Content-Type
21m 35s: DELETE /orgs/{org}/blocks/{username}: Undocumented Content-Type
21m 36s: DELETE /orgs/{org}/hooks/{id}: Undocumented Content-Type
21m 38s: DELETE /orgs/{org}/labels/{id}: Undocumented Content-Type
21m 40s: DELETE /orgs/{org}/members/{username}: Undocumented Content-Type
21m 42s: DELETE /orgs/{org}/projects/{id}: Undocumented Content-Type
21m 44s: DELETE /orgs/{org}/projects/{id}/columns/{column_id}: Undocumented Content-Type
21m 45s: DELETE /orgs/{org}/projects/{id}/columns/{column_id}/issues/{issue_id}: Undocumented Content-Type
21m 50s: DELETE /repos/{owner}/{repo}: Missing Content-Type header
21m 50s: DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}: Undocumented Content-Type
22m 6s: DELETE /repos/{owner}/{repo}/issues/{index}/labels/{id}: Undocumented Content-Type
22m 16s: DELETE /repos/{owner}/{repo}/pulls/{index}/reviews/{id}: Undocumented Content-Type
22m 32s: DELETE /user/actions/variables/{variablename}: Undocumented status code
22m 33s: DELETE /user/applications/oauth2/{id}: Server error
22m 33s: DELETE /user/applications/oauth2/{id}: Undocumented status code
22m 34s: DELETE /user/applications/oauth2/{id}: Missing Content-Type header
22m 34s: DELETE /user/blocks/{username}: Schema-valid request rejected
22m 34s: DELETE /user/blocks/{username}: Undocumented status code
22m 36s: DELETE /user/gpg_keys/{id}: Schema-violating request accepted
25m 45s: POST /orgs/{org}/actions/runners/registration-token: Undocumented Content-Type
25m 47s: POST /orgs/{org}/avatar: Undocumented Content-Type
25m 50s: POST /orgs/{org}/hooks: Undocumented Content-Type
25m 53s: POST /orgs/{org}/projects: Undocumented Content-Type
26m 39s: POST /repos/{owner}/{repo}/issues/{index}/labels: Undocumented status code
27m 40s: PUT /orgs/{org}/public_members/{username}: Undocumented status code28m 10s: GET /admin/orgs: Undocumented status code
28m 13s: GET /admin/packages: Undocumented status code
28m 19s: GET /licenses: Undocumented status code
28m 20s: GET /licenses: Undocumented status code
28m 36s: GET /orgs/{org}/actions/variables: Undocumented status code
28m 36s: GET /orgs/{org}/actions/variables: Undocumented status code
28m 40s: GET /orgs/{org}/blocks: Schema-violating request accepted
28m 42s: GET /orgs/{org}/hooks: Undocumented status code
28m 45s: GET /orgs/{org}/members: Response violates schema
28m 45s: GET /orgs/{org}/members: Schema-violating request accepted
28m 49s: GET /orgs/{org}/public_members: Response violates schema
28m 50s: GET /orgs/{org}/public_members: Undocumented status code
28m 51s: GET /orgs/{org}/public_members: Undocumented status code
28m 55s: GET /orgs/{org}/teams/search: Schema-violating request accepted
29m 13s: GET /repos/{owner}/{repo}/actions/runs/{run}/jobs: Undocumented status code
29m 31s: GET /repos/{owner}/{repo}/branches: Undocumented status code
29m 32s: GET /repos/{owner}/{repo}/branches: Undocumented status code
29m 58s: GET /repos/{owner}/{repo}/git/refs: Undocumented status code
30m 14s: GET /repos/{owner}/{repo}/issues/comments: Undocumented status code
30m 18s: GET /repos/{owner}/{repo}/issues/{index}: Undocumented status code
30m 18s: GET /repos/{owner}/{repo}/issues/{index}: Undocumented status code
30m 21s: GET /repos/{owner}/{repo}/issues/{index}/assignees/{assignee}: Undocumented status code
30m 35s: GET /repos/{owner}/{repo}/issues/{index}/timeline: Undocumented status code
30m 45s: GET /repos/{owner}/{repo}/milestones: Undocumented status code
30m 47s: GET /repos/{owner}/{repo}/new_pin_allowed: Undocumented status code
30m 48s: GET /repos/{owner}/{repo}/new_pin_allowed: Undocumented status code
31m 13s: GET /repos/{owner}/{repo}/releases/latest: Undocumented status code
31m 14s: GET /repos/{owner}/{repo}/releases/latest: Undocumented status code
31m 15s: GET /repos/{owner}/{repo}/reviewers: Undocumented status code
31m 15s: GET /repos/{owner}/{repo}/reviewers: Undocumented status code
31m 28s: GET /repos/{owner}/{repo}/tag_protections: Undocumented status code
31m 35s: GET /repos/{owner}/{repo}/topics: Undocumented status code
31m 38s: GET /repos/{owner}/{repo}/wiki/pages: Undocumented status code
32m 20s: GET /user/orgs: Undocumented status code
32m 37s: GET /users/search: Undocumented status code
32m 40s: GET /version: Undocumented status code
32m 51s: DELETE /orgs/{org}: Undocumented Content-Type
32m 52s: DELETE /orgs/{org}: Undocumented status code
32m 53s: DELETE /orgs/{org}: Undocumented status code
32m 57s: DELETE /repos/{owner}/{repo}/avatar: Undocumented status code
32m 57s: DELETE /repos/{owner}/{repo}/avatar: Undocumented status code
33m 3s: DELETE /repos/{owner}/{repo}/issues/{index}/assignees: Undocumented Content-Type
33m 9s: DELETE /repos/{owner}/{repo}/issues/{index}/labels: Undocumented status code
33m 20s: DELETE /repos/{owner}/{repo}/issues/{index}/times: Undocumented Content-Type
33m 23s: DELETE /repos/{owner}/{repo}/pulls/{index}/requested_reviewers: Undocumented Content-Type
33m 55s: GET /repos/{owner}/{repo}/branches/{branch}: Undocumented status code
34m 5s: GET /user/following/{username}: Missing Content-Type header
34m 13s: POST /repos/{owner}/{repo}/actions/workflows/{workflow_id}/dispatches: Undocumented Content-Type
34m 16s: POST /repos/{owner}/{repo}/branch_protections: Undocumented status code
34m 21s: PUT /repos/{owner}/{repo}/actions/workflows/{workflow_id}/enable: Undocumented status code
34m 26s: GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/runs: Server error
34m 26s: GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/runs: Undocumented Content-Type
34m 26s: GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/runs: Undocumented status code
34m 40s: POST /admin/users/{username}/badges: Undocumented Content-Type
34m 49s: POST /orgs/{org}/actions/variables/{variablename}: Schema-valid request rejected
34m 49s: POST /orgs/{org}/actions/variables/{variablename}: Undocumented status code
34m 49s: POST /orgs/{org}/actions/variables/{variablename}: Missing Content-Type header
34m 52s: POST /orgs/{org}/projects/{id}/columns: Schema-valid request rejected
34m 54s: POST /orgs/{org}/projects/{id}/columns/move: Schema-valid request rejected
35m: POST /orgs/{org}/projects/{id}/issues/{issue_id}/move: Schema-valid request rejected
35m 5s: POST /packages/{owner}/{type}/{name}/-/unlink: Undocumented status code
35m 18s: POST /repos/{owner}/{repo}/issues/{index}/times: Undocumented Content-Type
35m 20s: POST /repos/{owner}/{repo}/projects/{id}/columns: Undocumented Content-Type
35m 33s: POST /repos/{owner}/{repo}/pulls/comments/{id}/unresolve: Undocumented Content-Type
35m 35s: POST /repos/{owner}/{repo}/pulls/{index}/comments/{id}/replies: Undocumented Content-Type
35m 38s: POST /repos/{owner}/{repo}/pulls/{index}/reviews/{id}/dismissals: Undocumented status code
35m 41s: POST /repos/{owner}/{repo}/pulls/{index}/reviews/{id}/undismissals: Undocumented Content-Type
36m 5s: POST /users/{username}/tokens: Undocumented status code
36m 7s: PUT /orgs/{org}/actions/secrets/{secretname}: Schema-valid request rejected
36m 7s: PUT /orgs/{org}/actions/secrets/{secretname}: Undocumented status code
36m 7s: PUT /orgs/{org}/actions/secrets/{secretname}: Schema-valid request rejected
36m 7s: PUT /orgs/{org}/actions/secrets/{secretname}: Missing Content-Type header
36m 9s: PUT /orgs/{org}/actions/variables/{variablename}: Undocumented status code
36m 9s: PUT /orgs/{org}/actions/variables/{variablename}: Schema-valid request rejected
36m 9s: PUT /orgs/{org}/actions/variables/{variablename}: Missing Content-Type header
36m 11s: PUT /orgs/{org}/blocks/{username}: Schema-valid request rejected
36m 11s: PUT /orgs/{org}/blocks/{username}: Undocumented status code
36m 25s: PUT /user/actions/variables/{variablename}: Missing Content-Type header
36m 25s: PUT /user/actions/variables/{variablename}: Schema-valid request rejected
36m 41s: GET /orgs/{org}/blocks/{username}: Missing Content-Type header
36m 47s: GET /orgs/{org}/members/{username}: Missing Content-Type header
37m 26s: GET /repos/{owner}/{repo}/issues/{index}/assets/{attachment_id}: Undocumented Content-Type
37m 31s: GET /repos/{owner}/{repo}/keys/{id}: Undocumented Content-Type
37m 33s: GET /repos/{owner}/{repo}/labels/{id}: Undocumented Content-Type
37m 52s: GET /repos/{owner}/{repo}/releases/{id}/assets/{attachment_id}: Undocumented Content-Type
38m 15s: GET /user/actions/variables/{variablename}: Undocumented status code
38m 15s: GET /user/actions/variables/{variablename}: Undocumented status code
38m 32s: GET /users/{username}: Response violates schema
38m 37s: GET /users/{username}/followers: Undocumented status code
38m 45s: GET /users/{username}/heatmap: Undocumented status code
38m 45s: GET /users/{username}/heatmap: Undocumented status code
38m 46s: GET /users/{username}/keys: Schema-violating request accepted
38m 52s: GET /users/{username}/projects: Undocumented status code
39m 21s: PATCH /orgs/{org}/projects/{id}/columns/{column_id}: Schema-valid request rejected
39m 30s: PATCH /repos/{owner}/{repo}/hooks/{id}: Undocumented Content-Type
39m 42s: PATCH /repos/{owner}/{repo}/labels/{id}: Undocumented Content-Type
39m 52s: PATCH /repos/{owner}/{repo}/projects/{id}/columns/{column_id}: Undocumented Content-Type
39m 56s: PATCH /repos/{owner}/{repo}/tag_protections/{id}: Undocumented Content-Type
40m 22s: DELETE /orgs/{org}/actions/variables/{variablename}: Missing Content-Type header
40m 22s: DELETE /orgs/{org}/blocks/{username}: Schema-valid request rejected
40m 22s: DELETE /orgs/{org}/blocks/{username}: Undocumented status code
40m 22s: DELETE /orgs/{org}/blocks/{username}: Undocumented status code
40m 23s: DELETE /orgs/{org}/blocks/{username}: Undocumented status code
40m 25s: DELETE /orgs/{org}/labels/{id}: Missing Content-Type header
40m 27s: DELETE /orgs/{org}/members/{username}: Missing Content-Type header
40m 27s: DELETE /orgs/{org}/members/{username}: Server error
40m 27s: DELETE /orgs/{org}/members/{username}: Undocumented status code
40m 33s: DELETE /packages/{owner}/{type}/{name}: Undocumented status code
40m 40s: DELETE /repos/{owner}/{repo}/actions/secrets/{secretname}: Undocumented status code
41m 7s: DELETE /repos/{owner}/{repo}/push_mirrors/{name}: Undocumented status code
41m 9s: DELETE /repos/{owner}/{repo}/releases/{id}/assets/{attachment_id}: Undocumented Content-Type
41m 22s: DELETE /user/actions/secrets/{secretname}: Undocumented status code
45m 23s: POST /orgs/{org}/avatar: Undocumented status code
45m 24s: POST /orgs/{org}/hooks: Undocumented status code
45m 44s: POST /repos/{owner}/{repo}/issues/{index}/blocks: Undocumented status code
46m 24s: GET /admin/actions/jobs: Undocumented status code
46m 27s: GET /admin/emails: Undocumented status code
46m 29s: GET /admin/hooks: Undocumented status code
46m 42s: GET /orgs/{org}/activities/feeds: Response violates schema
46m 48s: GET /orgs/{org}/repos: Response violates schema
47m 3s: GET /repos/{owner}/{repo}/actions/workflows: Undocumented status code
47m 4s: GET /repos/{owner}/{repo}/archive/{archive}: Undocumented status code
47m 11s: GET /repos/{owner}/{repo}/compare/{basehead}: Undocumented status code
47m 21s: GET /repos/{owner}/{repo}/git/trees/{sha}: Undocumented status code
47m 53s: GET /repos/{owner}/{repo}/pulls/{index}/reviews: Undocumented status code
48m 35s: GET /user/subscriptions: Undocumented status code
48m 44s: DELETE /orgs/{org}: Server error
48m 44s: DELETE /orgs/{org}: Undocumented status code
48m 44s: DELETE /orgs/{org}/avatar: Missing Content-Type header
48m 45s: DELETE /orgs/{org}/repos: Missing Content-Type header
49m 2s: DELETE /token: Undocumented status code
49m 5s: POST /orgs/{org}/repos: Schema-valid request rejected
49m 5s: POST /orgs/{org}/repos: Undocumented status code
49m 6s: POST /orgs/{org}/repos: Response violates schema
49m 6s: POST /orgs/{org}/repos: Undocumented status code
49m 19s: GET /user/following/{username}: Undocumented status code
49m 19s: DELETE /orgs/{org}/public_members/{username}: Missing Content-Type header
49m 21s: DELETE /repos/{owner}/{repo}/releases/tags/{tag}: Undocumented status code
49m 27s: PUT /repos/{owner}/{repo}/branches/{branch}: Undocumented status code
49m 38s: POST /orgs/{org}/actions/variables/{variablename}: Schema-valid request rejected
49m 49s: POST /repos/{owner}/{repo}/issues/comments/{id}/reactions: Undocumented status code
50m 18s: PUT /user/actions/variables/{variablename}: Undocumented status code
50m 20s: GET /admin/hooks/{id}: Undocumented status code
50m 27s: GET /orgs/{org}/members/{username}: Undocumented Content-Type
50m 27s: GET /orgs/{org}/members/{username}: Undocumented status code
50m 31s: GET /orgs/{org}/projects/{id}/columns/{column_id}/issues: Undocumented status code
50m 32s: GET /packages/{owner}: Schema-violating request accepted
50m 40s: GET /repos/{owner}/{repo}/actions/variables/{variablename}: Undocumented status code
50m 56s: GET /repos/{owner}/{repo}/releases/{id}/assets: Undocumented status code
50m 57s: GET /repos/{owner}/{repo}/releases/{id}/assets/{attachment_id}: Undocumented status code
51m 2s: GET /teams/{id}/activities/feeds: Response violates schema
51m 17s: GET /users/{username}/following: Response violates schema
51m 31s: PATCH /orgs/{org}/hooks/{id}: Schema-valid request rejected
51m 31s: PATCH /orgs/{org}/hooks/{id}: Undocumented status code
51m 57s: DELETE /orgs/{org}/actions/secrets/{secretname}: Missing Content-Type header53m 38s: POST /orgs/{org}/teams: Response violates schema
53m 44s: POST /repos/{owner}/{repo}/issues/{index}/assets: Server error
53m 44s: POST /repos/{owner}/{repo}/issues/{index}/assets: Undocumented status code
54m 9s: GET /notifications/new: Undocumented status code
54m 9s: GET /notifications/new: Undocumented status code
54m 11s: GET /orgs/{org}/actions/variables: Undocumented Content-Type
54m 11s: GET /orgs/{org}/actions/variables: Schema-violating request accepted
54m 14s: GET /orgs/{org}/public_members: Undocumented Content-Type
54m 14s: GET /orgs/{org}/teams: Response violates schema
54m 15s: GET /orgs/{org}/teams/search: Response violates schema
54m 24s: GET /repos/{owner}/{repo}/commits: Undocumented status code
54m 26s: GET /repos/{owner}/{repo}/editorconfig/{filepath}: Undocumented status code
54m 37s: GET /repos/{owner}/{repo}/issues/{index}/subscriptions/check: Undocumented status code
54m 48s: GET /repos/{owner}/{repo}/tags: Undocumented status code
54m 51s: GET /repos/{owner}/{repo}/wiki/revisions/{pageName}: Undocumented status code
54m 53s: GET /signing-key.gpg: Undocumented status code
55m 1s: GET /user/starred: Undocumented status code56m 7s: GET /teams/{id}: Response violates schema
56m 14s: GET /users/{username}/following/{target}: Missing Content-Type header
56m 15s: GET /users/{username}/orgs: Undocumented status code
56m 26s: PATCH /teams/{id}: Response violates schema
56m 26s: PATCH /teams/{id}: Schema-valid request rejected
56m 26s: PATCH /teams/{id}: Undocumented status code
Stateful9m 1s in 6 passes, 55 found
22m 49s: POST /repos/{owner}/{repo}/releases/{id}/assets: Undocumented Content-Type
22m 50s: GET /user/repos: Response violates schema
22m 51s: GET /users/{username}/orgs: Undocumented Content-Type
22m 52s: POST /repos/{template_owner}/{template_repo}/generate: Undocumented Content-Type
22m 53s: GET /user/subscriptions: Response violates schema
22m 55s: DELETE /admin/users/{username}: Undocumented Content-Type
22m 56s: DELETE /admin/users/{username}/badges: Undocumented Content-Type
23m 5s: POST /user/actions/variables/{variablename}: Missing Content-Type header
23m 6s: PATCH /admin/users/{username}: Undocumented Content-Type
23m 8s: POST /admin/users/{username}/keys: Undocumented Content-Type
23m 8s: POST /repos/{owner}/{repo}/pulls/{index}/requested_reviewers: Undocumented Content-Type
23m 9s: GET /users/{username}/starred: Undocumented Content-Type
23m 11s: POST /admin/users/{username}/repos: Undocumented Content-Type
23m 13s: GET /users/{username}/subscriptions: Undocumented Content-Type
23m 16s: GET /repos/issues/search: Server error
23m 16s: GET /repos/issues/search: Undocumented Content-Type
23m 16s: GET /repos/issues/search: Undocumented status code
23m 16s: GET /users/{username}/repos: Undocumented Content-Type
23m 28s: GET /admin/actions/runs: Server error
23m 28s: GET /admin/actions/runs: Undocumented status code
23m 46s: GET /users/{username}/gpg_keys: Undocumented Content-Type
23m 56s: POST /repos/{owner}/{repo}/pulls/{index}/reviews: Undocumented Content-Type
23m 58s: GET /users/{username}/tokens: Undocumented Content-Type
24m: GET /admin/users/{username}/badges: Undocumented Content-Type
24m 1s: POST /repos/{owner}/{repo}/issues/comments/{id}/assets: Undocumented Content-Type
24m 5s: POST /admin/users/{username}/rename: Undocumented Content-Type
24m 19s: GET /users/{username}/followers: Undocumented Content-Type
24m 25s: DELETE /user/projects/{id}: Missing Content-Type header
24m 31s: GET /teams/{id}/repos: Response violates schema
24m 34s: DELETE /users/{username}/tokens/{token}: Undocumented Content-Type
24m 34s: GET /user/blocks: Undocumented status code
24m 46s: GET /repos/{owner}/{repo}/actions/jobs/{job_id}/logs: Undocumented Content-Type
24m 50s: POST /repos/{owner}/{repo}/issues/{index}/assignees: Undocumented Content-Type
24m 52s: POST /repos/{owner}/{repo}/issues/{index}/labels: Undocumented Content-Type
24m 55s: POST /repos/{owner}/{repo}/issues/{index}/comments: Undocumented Content-Type
24m 56s: GET /users/{username}/projects: Undocumented Content-Type
24m 56s: PATCH /admin/users/{username}: Schema-valid request rejected
25m 2s: POST /repos/{owner}/{repo}/projects/{id}/columns/{column_id}/issues/{issue_id}: Undocumented Content-Type
25m 3s: PUT /teams/{id}/members/{username}: Missing Content-Type header
25m 24s: GET /users/{username}/keys: Undocumented Content-Type
41m 43s: POST /repos/{owner}/{repo}/pulls/{index}/reviews/{id}/dismissals: Undocumented Content-Type
41m 45s: POST /repos/{owner}/{repo}/issues/comments/{id}/reactions: Undocumented Content-Type
42m 17s: DELETE /teams/{id}/repos/{org}/{repo}: Missing Content-Type header
42m 23s: GET /users/{username}/heatmap: Undocumented Content-Type
42m 25s: GET /users/{username}: Undocumented Content-Type
42m 30s: PUT /teams/{id}/repos/{org}/{repo}: Missing Content-Type header
42m 40s: GET /label/templates/{name}: API accepts requests without authentication
42m 43s: POST /repos/{owner}/{repo}/issues/comments/{id}/assets: Server error
42m 43s: POST /repos/{owner}/{repo}/issues/comments/{id}/assets: Undocumented status code
43m 19s: POST /user/repos: Server error
43m 19s: POST /user/repos: Undocumented status code
43m 30s: GET /users/{username}/activities/feeds: Undocumented Content-Type
43m 52s: POST /repos/{owner}/{repo}/issues/{index}/assets: Undocumented Content-Type
44m 53s: POST /repos/{owner}/{repo}/diffpatch: Undocumented Content-Type56m 53s: POST /admin/users/{username}/repos: Undocumented status code
015m30m45m1h
OperationFailuresCases
Failed438

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/issues/search`
Response200 OK
[]
Reproduce
curl -X GET 'http://0.0.0.0:41459/api/v1/repos/issues/search?state=open&labels=&milestones=&q=&type=issues&since=2000-01-01T00%3A00%3A00Z&before=2000-01-01T00%3A00%3A00Z&assigned=true&created=true&mentioned=true&review_requested=true&reviewed=true&owner=&created_by=&team=&page=1&limit=0'

Response violates schemaST1087 violations

null is not of type "array"

Validated against the response schema for status code 200.

Schema at /definitions/Issue/properties/assignees:

    {
        "type": "array",
        "items": {
            "$ref": "#/components/schemas/User"
        },
        "x-go-name": "Assignees"
    }

Value:

    null
null is not of type "array"

Validated against the response schema for status code 200.

Schema at /definitions/Issue/properties/projects:

    {
        "type": "array",
        "items": {
            "$ref": "#/components/schemas/Project"
        },
        "x-go-name": "Projects"
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/Milestone:

    {
        "type": "object",
        "description": "Milestone milestone is a collection of issues on one repo...
        "properties": {
            "closed_at": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Closed"
            },
            "closed_issues": {
                "description": "ClosedIssues is the number of closed issues in th...
                "type": "integer",
                "format": "int64",
                "x-go-name": "ClosedIssues"
            },
            "created_at": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Created"
        // Output truncated...
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/PullRequestMeta:

    {
        "type": "object",
        "description": "PullRequestMeta PR info if an issue is a PR",
        "properties": {
            "draft": {
                "type": "boolean",
                "x-go-name": "IsWorkInProgress"
            },
            "html_url": {
                "type": "string",
                "x-go-name": "HTMLURL"
            },
            "merged": {
                "type": "boolean",
                "x-go-name": "HasMerged"
            },
            "merged_at": {
                "type": "string",
                "format": "date-time",
        // Output truncated...
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/User:

    {
        "type": "object",
        "description": "User represents a user",
        "properties": {
            "active": {
                "description": "Is user active",
                "type": "boolean",
                "x-go-name": "IsActive"
            },
            "avatar_url": {
                "description": "URL to the user's avatar",
                "type": "string",
                "x-go-name": "AvatarURL"
            },
            "created": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Created"
            },
        // Output truncated...
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/Issue/properties/closed_at:

    {
        "type": "string",
        "format": "date-time",
        "x-go-name": "Closed"
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/Issue/properties/due_date:

    {
        "type": "string",
        "format": "date-time",
        "x-go-name": "Deadline"
    }

Value:

    null

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `type` in query - type: Incorrect type
Response200 OK
[{"id":1,"url":"http://localhost:3000/api/v1/repos/admin/demo/issues/1","html_url":"http://0.0.0.0:41459/admin/demo/issues/1","number":1,"user":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":true,"last_login":"1970-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restrict // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/issues/search?type=null&type=null'

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response400 Bad Request
{"message":"owner organisation is required for filtering on team","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/issues/search?team=%C3%A3&review_requested=false&before=0096-03-06T22%3A45%3A34Z&state=closed&page=215516360653159340527583232000'

Undocumented status codeST103

Received: 404
Documented: 200, 400, 422
Response404 Not Found
{"message":"user does not exist [uid: 0, name: ž]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/issues/search?created_by=%C2%9E&reviewed=false&before=2026-10-19T12%3A01%3A09Z&state=closed&assigned=false&type=pulls&since=0347-04-03T16%3A57%3A57%2B14%3A41'

Server errorST101

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json

Undocumented status codeST103

Received: 500
Documented: 200, 400, 422
Response500 Internal Server Error
PANIC: runtime error: makeslice: cap out of range
/usr/local/go/src/runtime/panic.go:859 (0x492004)
/go/src/gitea.dev/modules/web/routing/logger_manager.go:87 (0x157033b)
/usr/local/go/src/runtime/panic.go:859 (0x492004)
/usr/local/go/src/runtime/slice.go:34 (0x4951b2)
/usr/local/go/src/runtime/slice.go:114 (0x49519f)
/go/pkg/mod/github.com/blevesearch/bleve/v2@v2.6.1/search/collector/slice.go:28 (0x1fd827c)
/go/pkg/mod/github.com/blevesearch/bleve/v2@v2.6.1/search/collector/topn.go:281 (0x1fd826e)
/go/pkg/ // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/issues/search?mentioned=true&before=3721-11-29T07%3A17%3A04Z&limit=46183&q=%F3%98%8A%839%1D%F0%BD%B6%9E&review_requested=true&created_by=&team=&page=41518172862067522709261123584&assigned=false&owner=admin'
POST/admin/users/{username}/repos
Server error+5 moreless
  • Server error on undeclared request Content-Type
  • Response violates schema
  • Schema-valid request rejected
  • Undocumented Content-Type
  • Undocumented status code
649

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"auto_init": false, "default_branch": "", "description": "", "gitignores": "", "issue_labels": "", "license": "", "name": "", "object_format_name": "sha1", "private": false, "readme": "", "template": false, "trust_model": "default"}' http://0.0.0.0:41459/api/v1/admin/users/0/repos

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[Name]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"name": "", "license": ""}' http://0.0.0.0:41459/api/v1/admin/users/workbench-user/repos

Response violates schemaST108

"" is not a "email"

Validated against the response schema for status code 201.

Schema at /definitions/User/properties/email:

    {
        "format": "email",
        "type": "string",
        "x-go-name": "Email"
    }

Value:

    ""
Response201 Created
{"id":16,"owner":{"id":4,"login":"workbench-user","type":"Organization","login_name":"","source_id":0,"full_name":"ÿ\u001c‘","email":"","avatar_url":"http://0.0.0.0:41459/avatars/fa25ceee0d7be94b95c0208f7456232d4e85b901ba9bb49d8219ba29e2313dc7","html_url":"http://0.0.0.0:41459/workbench-user","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:59:28Z","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"€򰸁\u001d􊧿\\9¼ŸKêFIÞ // Output truncated...
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\u000bd\t\u0089<\udac8\udcb1O\u00a4": {"\u00be\ud9f6\udf73/\u0003\ud8e0\udf67\nb%": {"?": false, "\u00a7\u00dc[\uda11\udc79": "", "\udbef\udff4": null}, "\ud9dc\uddfb7\ud844\ude4c\u00c0\u00bf\udb66\udfbb?": {}, "\udb6d\udc2e\u00c1\u0095": {"": 8598632226291.554, "\u000f": -24093668}}, "V\ud835\udfad\u001e\u00be\udb2d\ude98\ud939\uddb1w": [], "": {}, "name": "check_repo_stats", "license": ""}' http://0.0.0.0:41459/api/v1/admin/users/workbench-user/repos

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 201, 400, 403, 404, 409, 422
Response500 Internal Server Error
{"message":"initRepository: prepareRepoCommit: getLicense[Ìþ]: GetLicense[Ìþ]: file does not exist","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"": null, "\u008eP\u00bd\u00c4\u0019\udb84\ude00\u009b\u001c\u00b1\u00d3\u00d3]": [5549651523, -5.935654723787171e-170, 3.2085398459316596e+16], "1\u0082\u00bf": {}, "g\u00eb\uda97\udd95hx^": {"": [], "\udab9\udea5\ud880\udf3f\u00f3\u00b6\udb6e\ude28\u00e6\u0099\u0019": {"\u0096j\rRJ\u0017\udb74\udd25K\u00f2\ud87a\ude19]+\u0089O\u00b4\ud960\udee8\u00fb\u9688\udb2b\ude67": null, "\t": null, "": "y\ud905\udd70"}, "/": []}, "\u00cf": {"\u00a5\udbda\udef3\u00eb\ud8cc\udcca\ud9ff\udcf1\u00e9\u00f3\u001eH\u00a1": [], "\u0099\u00edp\udb3b\udda9": false, "": ["\u0082\udae3\udc6c\u009c\ud831\udd85\u00a5\ud8f1\uddd4\uda30\udf5e\u0092\u00fcC\u00d7\u009a\u00b5\udbe3\udd36-\u00be\u00a8", "\u0005\u00bc"]}, "name": "attachment.png", "auto_init": true, "license": "\u00cc\u00fe"}' http://0.0.0.0:41459/api/v1/admin/users/workbench-user/repos

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response400 Bad Request
{"message":"readme template does not exist, available templates: [Default]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"name": "workbench-user", "template": false, "auto_init": true, "readme": "\ud83c\uddfa\ud83c\uddf8", "default_branch": "main"}' http://0.0.0.0:41459/api/v1/admin/users/workbench-user/repos

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\u00af\u009a\udac0\udcbb\ud92e\udfc0\u00c8\u00de>yA<": [false, false], "\u00da\u00e6\udb82\udc17\u00d3\u0097N": {"nil": "\u00bb\u0006\u00f6N\u00ef\u00aa\u0018\u00db\u001c\u0091B\u00f4M\u00e2A\uda3f\udc5b\u0086G\ud9d1\udd02\u00b6\u0097@\u007f\ud871\udec0:-"}, "\u00ff\u00a0\udad5\udfd6\u009a\u0096": [{"4\ud876\udd2a\u00ee\u009edr": "\ud8df\ude93v\ud9db\udf9e\\\u00bc\ud9a7\udc5a"}], "": [2.6685765487920937e-184, [], []], "\u00f9\u008c\ud9c9\udcdc>WP\u0097": {}, "default_branch": "\u009a", "template": false, "name": "cleanup_packages", "object_format_name": "sha1", "license": "\u00cc\u00fe", "description": "\ud881\udfd9\\]T", "private": false}' http://0.0.0.0:41459/api/v1/admin/users/workbench/repos

Undocumented status codeST103

Received: 401
Documented: 201, 400, 403, 404, 409, 422
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
  1. GET/admin/emails
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/admin/emails?limit=9503732611&page=-70808'
  2. POST/admin/users/1/reposfailed here
    curl -X POST -H 'Sudo: AXS*?> HgZ' -H 'Authorization: -7' -H 'Content-Type: application/json' -d '{"\u00c7\u00ef\u00f1[HY\u0085\ud885\ude16\u00ba\u00f8\u00d3\u00f2\u0092": {}, "\u00f0\u00b8": {"6\u001b": null, "k\u00aav\u00cf\u008a\ud828\udd2f\ud9be\ude09\u0010\ud9ed\udfb1\u00ef\u00a5": "\u00d0_\u00e0\r\u001f\u00ac\u0003["}, "name": "\ud82c\udd5c\u0006[a\u001bk", "default_branch": "", "license": "", "private": false, "readme": "@!\ud9c8\udd86\u00f6\u00a0\u00cf\u00ffd\u00cf\u00ac", "auto_init": true, "description": "\u009e\u00a7pe\udae5\udf43R", "object_format_name": "sha256", "issue_labels": "[\u00a9|\udac0\udf3e\u00f1", "gitignores": "`\ueb95\u00f1", "template": false, "trust_model": "collaborator"}' 'http://0.0.0.0:41459/api/v1/admin/users/1/repos?token=%C2%98.'
POST/markdown
Server error on undeclared request Content-Type+5 moreless
  • JSON deserialization error
  • Missing Content-Type header
  • Schema-valid request rejected
  • Schema-violating request accepted
  • Undocumented Content-Type
304

JSON deserialization errorST109

Response must be valid JSON with 'Content-Type: application/json' header:

  Expecting value: line 1 column 1 (char 0)

Missing Content-Type headerST104

The following media types are documented in the schema:
- `text/html`
Response200 OK
<EMPTY>
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"Context": "", "Mode": "", "Text": "", "Wiki": false}' http://0.0.0.0:41459/api/v1/markdown

Undocumented Content-TypeST105

Received: application/json;charset=utf-8
Documented: text/html
Response422 Unprocessable Content
{"message":"[]: json: unable to unmarshal JSON object into Go bool within \"/Wiki\"","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"Context": "", "Mode": "", "Text": "", "Wiki": {}}' http://0.0.0.0:41459/api/v1/markdown

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: in body - wiki: Incorrect type
Response200 OK
<EMPTY>
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"Context": "", "Mode": "", "Text": "", "Wiki": null}' http://0.0.0.0:41459/api/v1/markdown

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"Context": "", "Mode": "", "Text": "", "Wiki": false}' http://0.0.0.0:41459/api/v1/markdown

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/markdown

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: text/html
Response422 Unprocessable Content
unsupported render mode: 8
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"Text": "", "Mode": "8", "Context": "T"}' http://0.0.0.0:41459/api/v1/markdown
POST/markup
Server error on undeclared request Content-Type+5 moreless
  • JSON deserialization error
  • Missing Content-Type header
  • Schema-valid request rejected
  • Schema-violating request accepted
  • Undocumented Content-Type
339

JSON deserialization errorST109

Response must be valid JSON with 'Content-Type: application/json' header:

  Expecting value: line 1 column 1 (char 0)

Missing Content-Type headerST104

The following media types are documented in the schema:
- `text/html`
Response200 OK
<EMPTY>
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"Context": "", "FilePath": "", "Mode": "", "Text": "", "Wiki": false}' http://0.0.0.0:41459/api/v1/markup

Undocumented Content-TypeST105

Received: application/json;charset=utf-8
Documented: text/html
Response422 Unprocessable Content
{"message":"[]: json: unable to unmarshal JSON object into Go bool within \"/Wiki\"","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"Context": "", "FilePath": "", "Mode": "", "Text": "", "Wiki": {}}' http://0.0.0.0:41459/api/v1/markup

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: in body - wiki: Incorrect type
Response200 OK
<EMPTY>
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"Context": "", "FilePath": "", "Mode": "", "Text": "", "Wiki": null}' http://0.0.0.0:41459/api/v1/markup

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"Context": "", "FilePath": "", "Mode": "", "Text": "", "Wiki": false}' http://0.0.0.0:41459/api/v1/markup

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 3 additional properties not defined in the schema (`"`, `󎽒`, `󴟌`). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: text/html
Response422 Unprocessable Content
unsupported render mode: IgnoredAuth
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\udafb\udf52": {"\u00fe": [5.98616902094471e+287]}, "\"": null, "\udb91\udfcc": {"\u001d\u0091\u008b1": [-36570158, -4677, null], "\u00ca\u0095)\u00d7\u0083\u0001\u0010\u00aeV\u0085#\u00c0\u00ab\u00f7\udbe2\udcba\u001e": []}, "FilePath": "", "Text": "\u008d\udb8f\ude8f\u00b6\ud89b\udf92<\"O", "Context": "\u00a2\ud90f\udf2f\u00bd\u0010\u0095\ud86b\udc65\udb55\udf1f\u00a3\ud9f4\udc64\u00da\u0019\u00fc", "Mode": "IgnoredAuth", "Wiki": false}' http://0.0.0.0:41459/api/v1/markup
GET/repos/{owner}/{repo}/git/commits/{sha}.{diffType}
API accepts requests without authentication+5 moreless
  • Server error
  • JSON deserialization error
  • Missing Content-Type header
  • Undocumented Content-Type
  • Undocumented status code
351

Undocumented Content-TypeST105

Received: application/json;charset=utf-8
Documented: text/plain
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/git/commits/0.diff

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/git/commits/{sha}.{diffType}`
Response200 OK
commit 8caabe76280791ab362a270cac3b5484415dc5ec
Author: admin <admin@example.com>
Date:   Mon Oct 19 11:55:08 2026 +0000

    Initial commit

diff --git a/README.md b/README.md
new file mode 100644
index 0000000..45d053e
--- /dev/null
+++ b/README.md
@@ -0,0 +1,2 @@
+# demo
+
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/git/commits/8caabe76280791ab362a270cac3b5484415dc5ec.diff

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 200, 404
Response500 Internal Server Error
{"message":"getRepoRawDiffForFileCmd: object does not exist [id: 3e6606ccc631313326677f348c469c9b993721af, rel_path: ]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/git/commits/3e6606ccc631313326677f348c469c9b993721af.patch

JSON deserialization errorST109

Response must be valid JSON with 'Content-Type: application/json' header:

  Expecting value: line 1 column 1 (char 0)

Missing Content-Type headerST104

The following media types are documented in the schema:
- `text/plain`
Response200 OK
<EMPTY>
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/git/commits/224be8d87218163ab6c94369af6b9b18e1a7f63a.diff
POST/admin/users/{username}/badges
Server error+4 moreless
  • Missing Content-Type header
  • Schema-valid request rejected
  • Undocumented Content-Type
  • Undocumented status code
375

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 204, 403
Response500 Internal Server Error
{"message":"badge does not exist [slug: badge1]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"badge_slugs": ["badge1", "badge2"]}' http://0.0.0.0:41459/api/v1/admin/users/workbench-user/badges

Undocumented status codeST103

Received: 422
Documented: 204, 403
Response422 Unprocessable Content
{"message":"[]: json: unable to unmarshal JSON object into Go string within \"/badge_slugs/0\"","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"badge_slugs": [{}]}' http://0.0.0.0:41459/api/v1/admin/users/workbench-user/badges

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[BadgeSlugs]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/admin/users/workbench-user/badges

Undocumented status codeST103

Received: 404
Documented: 204, 403
Response404 Not Found
{"message":"user redirect does not exist [name: undefinedcontenttype]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"": [false, {"\u0016\ud946\udfa8\u00cei\u00af\u0086\u0086\udbe1\uded4": true, "\u00b7@.\u00e0": null}], "\u00d4\u00e4\u00e4": {"\ud807\udd55\ud9d0\udd46E": [], "": {}, "\udb58\udc9e": {"l\u009bG3\u00d4\u00d2\u00e7": 3112, "\u00fc\t\u009d\udbee\udff2\u0016\ud8c3\udf84\u00be U\u00aa{\ud863\udf0c\u00cf\u00e8": false, ",3\u00ab\u00ae\u00e3:\u00a0\u00f1\u00b7\u0094\u77d8\u00e64\u00d6": -231955}}, "badge_slugs": ["\u00d0t\u0080", "|\udbcc\udcd3\u00f0", "\u001d\u0017"]}' http://0.0.0.0:41459/api/v1/admin/users/UndefinedContentType/badges

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"badge_slugs": []}' http://0.0.0.0:41459/api/v1/admin/users/workbench-user/badges

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/admin/users/workbench/badges
POST/orgs/{org}/actions/variables/{variablename}
Server error on undeclared request Content-Type+4 moreless
  • Missing Content-Type header
  • Schema-valid request rejected
  • Undocumented Content-Type
  • Undocumented status code
290

Undocumented status codeST103

Received: 404
Documented: 201, 400, 409, 500
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"description": "", "value": ""}' http://0.0.0.0:41459/api/v1/orgs/0/actions/variables/0

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"description": "", "value": ""}' http://0.0.0.0:41459/api/v1/orgs/0/actions/variables/0

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"value": ""}' http://0.0.0.0:41459/api/v1/orgs/workbench/actions/variables/0

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 201, 400, 409, 500
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/actions/variables/h

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response201 Created
<EMPTY>
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"value": "7\u00ad\u00fd{"}' http://0.0.0.0:41459/api/v1/orgs/workbench/actions/variables/h

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 2 additional properties not defined in the schema (``, `ZÜ󰍝·Í󦤓-BpK󽄊`). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.
Response400 Bad Request
{"message":"name must start with a letter or underscore and contain only letters, numbers, and underscores","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"": {}, "Z\u00dc\udb80\udf5d\u001a\u00b7\u00cd\udb5a\udd13-BpK\udbb4\udd0a": {}, "value": "7\u00ad\u00fd{"}' http://0.0.0.0:41459/api/v1/orgs/workbench/actions/variables/%5Ef%F3%86%AF%BC5
GET/orgs/{org}/public_members
API accepts requests without authentication+4 moreless
  • Response violates schema
  • Schema-violating request accepted
  • Undocumented Content-Type
  • Undocumented status code
421

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /orgs/{org}/public_members`
Response200 OK
[]
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/orgs/workbench/public_members

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `limit` in query - violates `type` at /properties/limit (was integer, became array)
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/orgs/workbench/public_members?limit=false&limit=-8095723711825685.0&limit=%F2%B1%BE%99%C3%B3e%F1%8E%96%95c%F2%9A%8D%AA%F1%91%9D%BF+%07&limit=true&limit=true&limit=%5B%27%5Cx85%5CU000b25bb%C3%98%C3%8E%5Cx84%C2%B7OS%E5%B0%85%27%2C+%5B%27null%27%5D%5D&limit=%5B%7B%7D%2C+%7B%27%27%3A+-4986630274%7D%2C+%5B2.811073935201362e-79%2C+64%2C+-1.7976931348623155e%2B308%5D%5D&limit=%5B%5B%27%5CU000b2797W%5Cx90%E5%87%8B%C3%A8M%27%2C+-617%2C+-3618179234659754.0%5D%2C+%5B%5D%2C+%7B%27z%5Cx86%C3%BF%C3%AB%5CU000d2e48ih%5Cx1d%2Cu%C3%90%5Cx7f%5Cx90%27%3A+%27null%27%7D%5D&limit=%5B%27false%27%2C+%27%5Cx08%C3%AA%27%5D&limit=%5B%7B%27%27%3A+2198748%7D%2C+%7B%27%5CU00098528%C3%B9N%C3%8D%5Cx9a%27%3A+729860887045975%2C+%27l%C2%AF%C3%B3%C2%B0z%27%3A+%27null%27%2C+%27%5Cx98%27%3A+%27Ib%5Cx89%5Cx13%C3%9B%27%7D%2C+%7B%7D%5D&limit=6.827840586016668e-233&limit=%C3%A0%F3%99%81%81%C3%B6%04R%C2%AD%5E%C2%AA%C3%BA%F2%98%A9%81%C2%8C~U%C2%B8%C3%96ID%C2%A1&limit=%17%1D%13%2F%3A%F1%B8%86%8D%C3%B8%C2%BC%C2%A5%C2%84%0B%F3%88%8B%A0%F0%95%B4%93%C3%89%C2%A5m%F1%BA%A9%A8.%C3%93%C3%AE%F2%91%8F%9E%C3%92&limit=%5B%27%5Cx00%27%2C+%27null%27%2C+%27false%27%5D&limit=-0.99999&limit=2.7596480045210805e-162&limit=true&limit=IgnoredAuth&limit=%C3%97%C2%81%C3%99r_%F2%82%85%AE%C2%81%C2%92%5D%C3%8B%C2%84&limit=i%E1%BC%AE%C2%81%1E&limit=&limit=1.654881956960055e-274&limit=%5B%27false%27%5D&limit=%5B%7B%27%5Cx13%27%3A+%5B2.844723533260223e%2B16%2C+%271%5Cx16%27%2C+%27V%C2%A2%C2%AF%27%5D%7D%5D&limit=%7B%7D&limit=%5B%5D&limit=%5B%27%5Cx873%5Cx1dO%5Cx00R%5Cx1a%27%5D&limit=1.1754943508222875e-38&limit=-3.3805742597298012e%2B16&limit=1.413656950708179e%2B16&limit=%5B%27false%27%2C+-2556446937584681.0%2C+-2.2727399078984103e-73%5D&limit=%7B%27%C3%B9%27%3A+%27null%27%7D&limit=%7B%22%27%5CU000cf9b1w%5CxadkK%5E%5Cx95%5Cx91%C3%BE%22%3A+%7B%27%C2%A5%5Cxa0%27%3A+%27null%27%7D%2C+%27%2C%C3%BC%2F%5CU000ac580%5CU000ddbd4m%2F%5CU00043701%C3%BD%5CU0003d4cf%5Cx17%27%3A+%5B%5D%2C+%27%7B%2B%27%3A+104003092755%7D&limit=%5B-7032%5D&limit=%7B%27%C3%8B%5Cx03%C3%AE%C2%B9%27%3A+870904221214381%2C+%27%C3%85%C3%86%27%3A+%27%5Cx97%C3%9D%5Cx94%5Cx87%C3%B8%5CU000de4dc5%C3%8C%5Cx1d%C3%93%27%7D&limit=%7B%27%C3%91%C3%A3%5CU0007a116%C2%A6-%C3%83%C2%BD%C3%9E%2A%27%3A+%5B849268%2C+7.476134761785938e%2B178%5D%2C+%27tXAb%C3%9F%60%C3%A4og%C3%9D%27%3A+%5B%27null%27%2C+%27null%27%2C+667402471284176%5D%2C+%27%C2%BF%C3%AC%27%3A+%5B%7B%7D%2C+%7B%7D%5D%7D&limit=%5B%5D'

Response violates schemaST108

"" is not a "email"

Validated against the response schema for status code 200.

Schema at /definitions/User/properties/email:

    {
        "format": "email",
        "type": "string",
        "x-go-name": "Email"
    }

Value:

    ""
Response200 OK
[{"id":4,"login":"workbench-user","type":"Organization","login_name":"","source_id":0,"full_name":"ÿ\u001c‘","email":"","avatar_url":"http://0.0.0.0:41459/avatars/fa25ceee0d7be94b95c0208f7456232d4e85b901ba9bb49d8219ba29e2313dc7","html_url":"http://0.0.0.0:41459/workbench-user","language":"","is_admin":true,"last_login":"1970-01-01T00:00:00Z","created":"2026-10-19T11:59:28Z","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"€򰸁\u001d􊧿\\9¼ŸKêFIÞ\u0019\u0007{񵦹񢙒", // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/public_members

Undocumented status codeST103

Received: 403
Documented: 200, 404
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'Authorization;' 'http://0.0.0.0:41459/api/v1/orgs/workbench/public_members?sudo=+%F0%98%95%97%26'

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: {' -H 'X-GITEA-OTP: '"'"'U$Pw' 'http://0.0.0.0:41459/api/v1/orgs/workbench/public_members?limit=-17696891&page=-311&sudo=v%F4%83%B4%A0%F4%82%A7%86%C3%9C%C2%8F%F3%91%9C%83%05k.xh%C2%A2&token=%F1%BE%BA%90%C3%97%C2%BB37U'

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X GET -H 'Authorization;' http://0.0.0.0:41459/api/v1/orgs/workbench/public_members
POST/orgs/{org}/repos
Server error on undeclared request Content-Type+4 moreless
  • Response violates schema
  • Schema-valid request rejected
  • Undocumented Content-Type
  • Undocumented status code
349

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"auto_init": false, "default_branch": "", "description": "", "gitignores": "", "issue_labels": "", "license": "", "name": "", "object_format_name": "sha1", "private": false, "readme": "", "template": false, "trust_model": "default"}' http://0.0.0.0:41459/api/v1/orgs/0/repos

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"name": ""}' http://0.0.0.0:41459/api/v1/orgs/workbench/repos

Undocumented status codeST103

Received: 401
Documented: 201, 400, 403, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: X`K)`1%X' -H 'Content-Type: application/json' -d '{"\u0015\u00c2D\u0019\u00b0\u001e\udab9\udcf5\u00e4\u00a9\ud8c1\uddd4B^\u00fe\uda2c\udcb02\uda4a\uddff\u00c8\u0088": {"": "8\"wm\u00a4\u00f5\u00ed"}, ";\u00f3\ud998\ude10": {"": {"\ud884\udc4e\ud92d\udfd0c\udbfc\udffa\u00d0\u00fc\u00fa\ud86b\ude78\u00b7\u0003'"'"'\u00be\u00cf\u00b1k\u00f8\u00c7?r\ub64c\u0080\u00c3\u00d5\u00b3\u000b\u00ed\uda9b\udfe2\u00ab\u00c7\u00d0\ud941\udfef\b\u00f3\u00c1": true, "\ud9a5\udcc5\u00d7\uda3a\udcd3\u000b\u0010\u00aa\u0089": null, "\u00c2U\u00d0\uda94\ude04\u0094\ud83e\ude74+\u009f": 92782}, "\u00bc.\u00d6\u001c\ud98b\udd0a\u00e1\u00a1/\ud8c5\udc10#\u00bc\u001b\u00e2\u00c3\u00a3\u00eaur\udb7d\udde1W": "\u0003", "\u00df+\uda5d\udf4e\u00ac\u0017\u00c9j": false}, "\u00ee": {"": [null], "\u0099\u00d6\u0005\u00fe": [null, null, null], "<\u00de": false}, "\u00c9\u0087R\u00df\udb2e\udf31c\u00e9\u00d7\ud9db\udd6a\u00ed\u0019W\u00af\ud8a6\udfe8\u00fa\ub66f_\u00ed\u008f>d4": {"": 6890278861219085.0, "!": 95732977644000160, "\u1575\u00a5\u00de\u00f4\u001c\udbca\udfd3&": null}, ")i\ud88e\udf9c\u0086l": {"\u008c\u00e4\ud9b7\udfe6\udb00\udea2\u0094\u00c46\u00bc\udb25\udff9": 7004}, "license": "", "name": "\u000f\u00d9"}' 'http://0.0.0.0:41459/api/v1/orgs/workbench/repos?sudo=%F2%A3%80%8C%F3%84%A6%9A&access_token=it%F0%AD%95%91&token=gdt_cOVnCMcLyABeu6KFtume2El5OaWoBbO1ti8ujRaMrz5'

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 201, 400, 403, 404
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/repos

Response violates schemaST108

"" is not a "email"

Validated against the response schema for status code 201.

Schema at /definitions/User/properties/email:

    {
        "format": "email",
        "type": "string",
        "x-go-name": "Email"
    }

Value:

    ""
Response201 Created
{"id":67,"owner":{"id":7,"login":"0","type":"Organization","login_name":"","source_id":0,"full_name":"ก ำกำ","email":"","avatar_url":"http://0.0.0.0:41459/avatars/b110d889e34e617e2b2bff57aac3557676c2f681f365bad5a89615d7a806f0f4","html_url":"http://0.0.0.0:41459/0","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T12:29:52Z","restricted":false,"active":false,"prohibit_login":false,"location":"V‹g`µ񼀖ᙔ—„6󈓕²","website":"","description":"Þô","visibility":"limited","follower // Output truncated...
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"name": "Owners", "license": ""}' http://0.0.0.0:41459/api/v1/orgs/workbench/repos

Undocumented status codeST103

Received: 409
Documented: 201, 400, 403, 404
Response409 Conflict
{"message":"The repository with the same name already exists.","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\to\u00f0\ud84c\udd72S\f\u00eeo\u00d3\u00c2\u0014\u001c\ud8d9\ude07\u00c4\u00ff\u00d7": [], "name": "Apache-2.0", "object_format_name": "sha1", "trust_model": "collaborator", "license": "\u00cc\u00fe"}' http://0.0.0.0:41459/api/v1/orgs/workbench/repos
POST/orgs/{org}/teams
Server error+4 moreless
  • Server error on undeclared request Content-Type
  • Response violates schema
  • Schema-valid request rejected
  • Undocumented status code
305

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[Name]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"units": ["repo.actions", "repo.packages", "repo.code", "repo.issues", "repo.ext_issues", "repo.wiki", "repo.pulls", "repo.releases", "repo.projects", "repo.ext_wiki"], "units_map": {"repo.actions": "read", "repo.code": "read", "repo.ext_issues": "none", "repo.ext_wiki": "none", "repo.issues": "write", "repo.packages": "read", "repo.projects": "none", "repo.pulls": "owner", "repo.releases": "none", "repo.wiki": "admin"}, "can_create_org_repo": false, "description": "", "includes_all_repositories": false, "name": "", "permission": "read", "visibility": "public"}' http://0.0.0.0:41459/api/v1/orgs/workbench/teams

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"can_create_org_repo": false, "description": "", "includes_all_repositories": false, "name": "", "permission": "read", "units": ["repo.actions", "repo.packages", "repo.code", "repo.issues", "repo.ext_issues", "repo.wiki", "repo.pulls", "repo.releases", "repo.projects", "repo.ext_wiki"], "units_map": {"repo.actions": "read", "repo.code": "read", "repo.ext_issues": "none", "repo.ext_wiki": "none", "repo.issues": "write", "repo.packages": "read", "repo.projects": "none", "repo.pulls": "owner", "repo.releases": "none", "repo.wiki": "admin"}, "visibility": "public"}' http://0.0.0.0:41459/api/v1/orgs/0/teams

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 3 additional properties not defined in the schema (`<y𖖻ªo˜`, `[FšÁ“oË󓸒?񌊩‚`, `񼫽ä`). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.

Undocumented status codeST103

Received: 400
Documented: 201, 404, 422
Response400 Bad Request
{"message":"no permission specified","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"<y\u000f\ud819\uddbb\u00aao\u0098": {"X\u00d9\u00c2/\u00da\u00bc\u0085\u0096+": [], "": ["\u008e\u00e4z\u00c9\u00ca", true]}, "[F\u009a\u00c1\u0093o\u00cb\udb0f\ude12?\ud8f0\udea9\u0082": [-55506596, false, "\u00eb#\ud929\udd44\u000b\u0093\n\u00ab\ud875\udf709\u0007\udb2b\udc52\udb73\ude70\u00d8J|\ud868\ude6b\u001eGo\uda35\udec3"], "\ud9b2\udefd\u00e4\u008d": {}, "name": "BSD-3-Clause-Clear"}' http://0.0.0.0:41459/api/v1/orgs/workbench/teams

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 201, 404, 422
Response500 Internal Server Error
{"message":"constraint failed: UNIQUE constraint failed: team_unit.team_id, team_unit.type (2067)","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"8\u0084": [null, "", null], "b\ud986\udf7e\u00b3": {"j\ud984\ude69n\u00e4C\u00e8": "\u00c4\u001a\u0014", "\u00e0\u00f8\u0093\u00da\u0016\udb8e\udc3a\ud974\udd99\uda71\udd37\udaec\udcf6\uda4f\udf4f:\u0017\u0083\ud941\ude8a\b\u00c8": 333679667, "\u00dc6\u00d7\ud8d3\udf14@\u00e3": -4.814848293647109e+16}, "\uda12\udec6\u00a9\u00f4\ud8cd\uddd7": {"": []}, "\u00ca": [18014398509481983, null], "units_map": {"\uda0c\udfa1\ud971\ude21": "J\u000e\u00d4\u0092B\ud98e\ude0b", "\u00e1\u008d\u00a6": "\udbcb\udc47C\u008e\u00c4", "\u00bdK\u00e7\ud965\udf05kU": "\ud989\udd1a\u0005\u00fcb"}, "name": "demo", "visibility": "public", "includes_all_repositories": true}' http://0.0.0.0:41459/api/v1/orgs/workbench/teams

Response violates schemaST1082 violations

null is not of type "array"

Validated against the response schema for status code 201.

Schema at /definitions/Team/properties/units:

    {
        "type": "array",
        "description": "Deprecated: This variable should be replaced by UnitsMap ...
        "items": {
            "type": "string"
        },
        "x-deprecated": true,
        "x-go-name": "Units",
        "example": [
            "repo.code",
            "repo.issues",
            "repo.ext_issues",
            "repo.wiki",
            "repo.pulls",
            "repo.releases",
            "repo.projects",
            "repo.ext_wiki"
        ]
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 201.

Schema at /definitions/Team/properties/units_map:

    {
        "type": "object",
        "additionalProperties": {
            "type": "string"
        },
        "x-go-name": "UnitsMap",
        "example": {
            "repo.code": "read",
            "repo.ext_issues": "none",
            "repo.ext_wiki": "none",
            "repo.issues": "write",
            "repo.projects": "none",
            "repo.pulls": "owner",
            "repo.releases": "none",
            "repo.wiki": "admin"
        }
    }

Value:

    null
Response201 Created
{"id":18,"name":"BSD-3-Clause","description":" \u001e","organization":{"id":7,"name":"0","full_name":"ก ำกำ","email":"","avatar_url":"http://0.0.0.0:41459/avatars/b110d889e34e617e2b2bff57aac3557676c2f681f365bad5a89615d7a806f0f4","description":"Þô","website":"","location":"V‹g`µ񼀖ᙔ—„6󈓕²","visibility":"limited","repo_admin_change_team_access":true,"username":"0"},"includes_all_repositories":true,"permission":"read","units":null,"units_map":null,"can_create_org_repo":false,"visibility":"public"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"units": [], "includes_all_repositories": true, "description": " \u001e", "visibility": "public", "name": "BSD-3-Clause", "permission": "read", "can_create_org_repo": false}' http://0.0.0.0:41459/api/v1/orgs/workbench/teams
GET/repos/{owner}/{repo}/actions/workflows/{workflow_id}/runsMissing test data
Server error+4 moreless
  • Schema-valid request rejected
  • Schema-violating request accepted
  • Undocumented Content-Type
  • Undocumented status code
359

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response400 Bad Request
{"message":"invalid status added","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/actions/workflows/%C2%B9%F2%96%8C%B4%C2%A4%11%C3%AF%3C%F1%B6%A1%8DB/runs?event=%C3%BB&scoped_workflow_source_repo_id=99056&status=added&page=-232&limit=332&exclude_pull_requests=true&actor=%F0%A9%87%89&head_sha=&branch=%26%C3%9B'

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `scoped_workflow_source_repo_id` in query - violates `format`, `minimum`, `maximum` at /properties/scoped_workflow_source_repo_id
Response200 OK
{"workflow_runs":[],"total_count":0}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/actions/workflows/%C2%AC%3C/runs?scoped_workflow_source_repo_id=-9223372036854775809'

Server errorST101

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json

Undocumented status codeST103

Received: 500
Documented: 200, 400, 403, 404
Response500 Internal Server Error
PANIC: runtime error: invalid memory address or nil pointer dereference
/usr/local/go/src/runtime/panic.go:859 (0x492004)
/go/src/gitea.dev/modules/web/routing/logger_manager.go:87 (0x157033b)
/usr/local/go/src/runtime/panic.go:859 (0x492004)
/usr/local/go/src/runtime/panic.go:336 (0x494eb4)
/usr/local/go/src/runtime/signal_unix.go:931 (0x494e85)
/go/src/gitea.dev/modules/git/repo_object.go:40 (0xfcfafc)
/go/src/gitea.dev/modules/git/repo_commit_nogogit.go:110 (0xfcb964)
/go/src/gitea.dev/modules/git/repo_c // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/0/actions/workflows/X%C2%9A%C3%B7/runs
GET/repos/{owner}/{repo}/commits
API accepts requests without authentication+4 moreless
  • Server error
  • Response violates schema
  • Schema-violating request accepted
  • Undocumented status code
386

Response violates schemaST108

null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/PayloadUser:

    {
        "type": "object",
        "description": "PayloadUser represents the author or committer of a commit",
        "properties": {
            "email": {
                "type": "string",
                "format": "email",
                "x-go-name": "Email"
            },
            "name": {
                "description": "Full name of the commit author",
                "type": "string",
                "x-go-name": "Name"
            },
            "username": {
                "description": "username of the user",
                "type": "string",
                "x-go-name": "UserName"
            }
        // Output truncated...
    }

Value:

    null
Response200 OK
[{"url":"http://localhost:3000/api/v1/repos/admin/demo/git/commits/ba211db62679a70982d196bf27a09b9217d0d4c0","sha":"ba211db62679a70982d196bf27a09b9217d0d4c0","created":"2026-10-19T12:00:13Z","html_url":"http://localhost:3000/admin/demo/commit/ba211db62679a70982d196bf27a09b9217d0d4c0","commit":{"url":"http://localhost:3000/api/v1/repos/admin/demo/git/commits/ba211db62679a70982d196bf27a09b9217d0d4c0","author":{"name":"admin","email":"admin@example.com","date":"2026-10-19T12:00:13Z"},"committer":{"name":"admin // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/commits

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/commits`
Response200 OK
[{"url":"http://localhost:3000/api/v1/repos/admin/demo/git/commits/ba211db62679a70982d196bf27a09b9217d0d4c0","sha":"ba211db62679a70982d196bf27a09b9217d0d4c0","created":"2026-10-19T12:00:13Z","html_url":"http://localhost:3000/admin/demo/commit/ba211db62679a70982d196bf27a09b9217d0d4c0","commit":{"url":"http://localhost:3000/api/v1/repos/admin/demo/git/commits/ba211db62679a70982d196bf27a09b9217d0d4c0","author":{"name":"admin","email":"admin@example.com","date":"2026-10-19T12:00:13Z"},"committer":{"name":"admin // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/commits

Response violates schemaST108

null is not of type "array"

Validated against the response schema for status code 200.

Schema at /definitions/Commit/properties/files:

    {
        "type": "array",
        "description": "Files contains information about files affected by the co...
        "items": {
            "$ref": "#/components/schemas/CommitAffectedFiles"
        },
        "x-go-name": "Files"
    }

Value:

    null
Response200 OK
[{"url":"http://localhost:3000/api/v1/repos/admin/demo/git/commits/ba211db62679a70982d196bf27a09b9217d0d4c0","sha":"ba211db62679a70982d196bf27a09b9217d0d4c0","created":"2026-10-19T12:00:13Z","html_url":"http://localhost:3000/admin/demo/commit/ba211db62679a70982d196bf27a09b9217d0d4c0","commit":{"url":"http://localhost:3000/api/v1/repos/admin/demo/git/commits/ba211db62679a70982d196bf27a09b9217d0d4c0","author":{"name":"admin","email":"admin@example.com","date":"2026-10-19T12:00:13Z"},"committer":{"name":"admin // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/commits?verification=true&limit=-44&files=false&stat=true&since=1002-12-07T02%3A44%3A23Z'

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 200, 404, 409
Response500 Internal Server Error
{"message":"exit status 128 - fatal: bad revision '󨑄?éÿ򬸪񺰨i?½$L¼7£𝳼'","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/commits?not=%F3%A8%91%84%1B%C3%A9%C3%BF%F2%AC%B8%AA%F1%BA%B0%A8i%03%C2%BD%24L%C2%BC7%C2%A3%F0%9D%B3%BC&path=%F2%87%97%8B&since=1707-04-22T04%3A47%3A16.662Z&sha=29aedd0d7588d49531b59a3680edb35ad36670c0&verification=true&until=2026-10-19T12%3A00%3A24Z&files=false&page=957&limit=5697'

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `since` in query - violates `format` at /properties/since
Response200 OK
[{"url":"http://localhost:3000/api/v1/repos/admin/demo/git/commits/ba211db62679a70982d196bf27a09b9217d0d4c0","sha":"ba211db62679a70982d196bf27a09b9217d0d4c0","created":"2026-10-19T12:00:13Z","html_url":"http://localhost:3000/admin/demo/commit/ba211db62679a70982d196bf27a09b9217d0d4c0","commit":{"url":"http://localhost:3000/api/v1/repos/admin/demo/git/commits/ba211db62679a70982d196bf27a09b9217d0d4c0","author":{"name":"admin","email":"admin@example.com","date":"2026-10-19T12:00:13Z"},"committer":{"name":"admin // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/commits?since='

Response violates schemaST108

null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/CommitStats:

    {
        "type": "object",
        "description": "CommitStats is statistics for a RepoCommit",
        "properties": {
            "additions": {
                "description": "Additions is the number of lines added",
                "type": "integer",
                "format": "int64",
                "x-go-name": "Additions"
            },
            "deletions": {
                "description": "Deletions is the number of lines deleted",
                "type": "integer",
                "format": "int64",
                "x-go-name": "Deletions"
            },
            "total": {
                "description": "Total is the total number of lines changed",
                "type": "integer",
        // Output truncated...
    }

Value:

    null
Response200 OK
[{"url":"http://localhost:3000/api/v1/repos/admin/demo/git/commits/ba211db62679a70982d196bf27a09b9217d0d4c0","sha":"ba211db62679a70982d196bf27a09b9217d0d4c0","created":"2026-10-19T12:00:13Z","html_url":"http://localhost:3000/admin/demo/commit/ba211db62679a70982d196bf27a09b9217d0d4c0","commit":{"url":"http://localhost:3000/api/v1/repos/admin/demo/git/commits/ba211db62679a70982d196bf27a09b9217d0d4c0","author":{"name":"admin","email":"admin@example.com","date":"2026-10-19T12:00:13Z"},"committer":{"name":"admin // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/commits?stat=false&page=0'

Response violates schemaST108

null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/PayloadCommitVerification:

    {
        "type": "object",
        "description": "PayloadCommitVerification represents the GPG verification...
        "properties": {
            "payload": {
                "description": "The signed payload content",
                "type": "string",
                "x-go-name": "Payload"
            },
            "reason": {
                "description": "The reason for the verification status",
                "type": "string",
                "x-go-name": "Reason"
            },
            "signature": {
                "description": "The GPG signature of the commit",
                "type": "string",
                "x-go-name": "Signature"
            },
        // Output truncated...
    }

Value:

    null
Response200 OK
[{"url":"http://localhost:3000/api/v1/repos/admin/demo/git/commits/ba211db62679a70982d196bf27a09b9217d0d4c0","sha":"ba211db62679a70982d196bf27a09b9217d0d4c0","created":"2026-10-19T12:00:13Z","html_url":"http://localhost:3000/admin/demo/commit/ba211db62679a70982d196bf27a09b9217d0d4c0","commit":{"url":"http://localhost:3000/api/v1/repos/admin/demo/git/commits/ba211db62679a70982d196bf27a09b9217d0d4c0","author":{"name":"admin","email":"admin@example.com","date":"2026-10-19T12:00:13Z"},"committer":{"name":"admin // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/commits?verification=false'

Undocumented status codeST103

Received: 403
Documented: 200, 404, 409
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'Authorization: AllowHeaderMismatch' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/commits?sha=8a03817e4b5de6cbf8ad3605de1899babebb360e&sudo=%C3%A4W%C3%AE%C2%8C%C2%A5%3C.%C2%80%C2%96'
POST/repos/{owner}/{repo}/diffpatchMissing test data
Server error+4 moreless
  • Server error on undeclared request Content-Type
  • Schema-valid request rejected
  • Undocumented Content-Type
  • Undocumented status code
666

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"author": {"email": "0@0.com", "name": ""}, "branch": "", "committer": {"email": "0@0.com", "name": ""}, "content": "", "dates": {"author": "2000-01-01T00:00:00Z", "committer": "2000-01-01T00:00:00Z"}, "force_push": false, "message": "", "new_branch": "", "signoff": false}' http://0.0.0.0:41459/api/v1/repos/0/0/diffpatch

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 200, 404, 423
Response500 Internal Server Error
{"message":"git apply error: exit status 128 - error: No valid patches in input (allow with \"--allow-empty\")","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"content": ""}' http://0.0.0.0:41459/api/v1/repos/admin/demo/diffpatch

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 4 additional properties not defined in the schema (``, `ËK񮃡M`, `æœÆŒffʤʨß` and 1 more). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.

Undocumented status codeST103

Received: 422
Documented: 200, 404, 423
Response422 Unprocessable Content
{"message":"[BranchName]: GitRefName","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\udbd8\udf04\u0017\u008c": {"\u00ae\u00d5\u00d9\u00ee": {"\u00dd\ud902\udec1\nHdZ\uda52\udfb2\udb14\ude45": true, "UndefinedStatusCode": null}}, "\u00e6\u0153\u00c6\u0152\ufb00\u02a4\u02a8\u00df": {"": [false, 40777379], "\u00c1\u00ac ": {"|": "\u0014\u0081\u00ce)t\u00eb\udbaf\udf32\u0085$\u00c8\u00c5k\u00cd<_", "\u0094\u008cx\u00bc\udb13\udf1e|\u0095\u0083\ud927\udc54": null, "\uda23\udca9M\u0082": 429}}, "\u00cbK\ud978\udce1M": [4.822112487356439e+16], "": [[false], {"\u00fc\u00c8\u00d2": 5.321223241442808e-188, "\u0088\u000f": null, "": true}, "\u00b5\u00e4\u0016"], "committer": {"\u00c1\u0082": 3.2222041854359536e+16, "H\u00da\u001b\ud914\udc4b\u0087": []}, "dates": {"": {}, "committer": "2026-10-19T12:00:12Z"}, "force_push": false, "content": "", "branch": "\u0013\udb01\ude20{(V\u00ad"}' http://0.0.0.0:41459/api/v1/repos/admin/demo/diffpatch

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"b\u00f7\u00e6\ud925\ude47\udb6d\udf2d": "MalformedMediaType", "content": ""}' http://0.0.0.0:41459/api/v1/repos/0/demo/diffpatch
POST/repos/{owner}/{repo}/file-contents
API accepts requests without authentication+4 moreless
  • Server error on undeclared request Content-Type
  • Response violates schema
  • Schema-valid request rejected
  • Undocumented status code
629

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"files": []}' 'http://0.0.0.0:41459/api/v1/repos/0/0/file-contents?ref='

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 200, 404
Response422 Unprocessable Content
{"message":"[Files]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/repos/admin/demo/file-contents

Response violates schemaST108

null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/ContentsResponse:

    {
        "type": "object",
        "description": "ContentsResponse contains information about a repo's entr...
        "properties": {
            "_links": {
                "$ref": "#/components/schemas/FileLinksResponse"
            },
            "content": {
                "description": "`content` is populated when `type` is `file`, oth...
                "type": "string",
                "x-go-name": "Content"
            },
            "download_url": {
                "description": "DownloadURL is the direct download URL for this f...
                "type": "string",
                "x-go-name": "DownloadURL"
            },
            "encoding": {
                "description": "`encoding` is populated when `type` is `file`, ot...
        // Output truncated...
    }

Value:

    null
Response200 OK
[null]
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\u00e8": [], "\u00fb\u00de\ud8b7\udc42\u00a7N\u0015bKzB\ud80c\udd95<\u00a4": null, "-script.pyw": [], "}\t\u00e0\u00cb\u008e\u00b2": [1.1125369292536007e-308], "files": ["\uda6a\udcdd\u008e\u00aaJ\udab0\udd39\u001dI.\u00dc\u00d8\u008a"]}' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/file-contents?ref='

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `POST /repos/{owner}/{repo}/file-contents`
Response200 OK
[null]
Reproduce
curl -X POST -H 'Content-Type: application/json' -d '{"\u00e8": [], "\u00fb\u00de\ud8b7\udc42\u00a7N\u0015bKzB\ud80c\udd95<\u00a4": null, "-script.pyw": [], "}\t\u00e0\u00cb\u008e\u00b2": [1.1125369292536007e-308], "files": ["\uda6a\udcdd\u008e\u00aaJ\udab0\udd39\u001dI.\u00dc\u00d8\u008a"]}' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/file-contents?ref='

Response violates schemaST1085 violations

null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/ContentsResponse/properties/content:

    {
        "type": "string",
        "description": "`content` is populated when `type` is `file`, otherwise n...
        "x-go-name": "Content"
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/ContentsResponse/properties/download_url:

    {
        "type": "string",
        "description": "DownloadURL is the direct download URL for this file",
        "x-go-name": "DownloadURL"
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/ContentsResponse/properties/encoding:

    {
        "type": "string",
        "description": "`encoding` is populated when `type` is `file`, otherwise ...
        "x-go-name": "Encoding"
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/ContentsResponse/properties/submodule_git_url:

    {
        "type": "string",
        "description": "`submodule_git_url` is populated when `type` is `submodul...
        "x-go-name": "SubmoduleGitURL"
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/ContentsResponse/properties/target:

    {
        "type": "string",
        "description": "`target` is populated when `type` is `symlink`, otherwise...
        "x-go-name": "Target"
    }

Value:

    null
Response200 OK
[null,{"name":"","path":"","sha":"7969751c3e371c6170d463a62bae3fe60071b364","last_commit_sha":"ba211db62679a70982d196bf27a09b9217d0d4c0","last_committer_date":"2026-10-19T12:00:13Z","last_author_date":"2026-10-19T12:00:13Z","type":"dir","mode":"40000","size":0,"encoding":null,"content":null,"target":null,"url":"http://localhost:3000/api/v1/repos/admin/demo/contents/?ref=main","html_url":"http://0.0.0.0:41459/admin/demo/src/branch/main/","git_url":"http://0.0.0.0:41459/api/v1/repos/admin/demo/git/blobs/79697 // Output truncated...
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"files": ["responses", "", "2\u0084", "6\udacf\udc2d/\ud97d\udc54\u00c68\u00f4\u00e6e&", "\u007f\u00eb2&\u00cd\u001b\u5748\uda99\udc7c\u0094\uda26\ude1a{S\u00f6\u00e4=", "y\ud879\udf63\udaa0\udc71"]}' http://0.0.0.0:41459/api/v1/repos/admin/demo/file-contents
POST/repos/{owner}/{repo}/issues/{index}/assets
Server error+4 moreless
  • Server error on undeclared request Content-Type
  • Schema-valid request rejected
  • Undocumented Content-Type
  • Undocumented status code
470

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' 'http://0.0.0.0:41459/api/v1/repos/0/0/issues/-9223372036854775808/assets?name='

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"This file cannot be uploaded or modified due to a forbidden file extension or type.","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data; boundary=a836fb309c0c64cb90ba41b265569bd2' -d $'--a836fb309c0c64cb90ba41b265569bd2\r\nContent-Disposition: form-data; name="attachment"; filename="attachment"\r\n\r\n�͔��\r\n--a836fb309c0c64cb90ba41b265569bd2--\r\n' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/assets

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 201, 400, 404, 413, 422, 423
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data; boundary=98d4fa8fa8cdaed67f6043759ab5e2ab' -d $'--98d4fa8fa8cdaed67f6043759ab5e2ab\r\n-466--98d4fa8fa8cdaed67f6043759ab5e2ab--\r\n' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/359/assets?name=%F0%B1%A4%90%E0%B5%95%C2%99%F1%B6%A4%90%C2%8E%C3%BAoT%19%C3%8B%F3%A3%9F%A1%C3%8B%C2%BC+3j'

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data; boundary=5711bde5a02ba1b529629912a43bbe1c' -d $'--5711bde5a02ba1b529629912a43bbe1c\r\nContent-Disposition: form-data; name="attachment"; filename="attachment"\r\n\r\n!��!�\x1c��ذ���\r\n--5711bde5a02ba1b529629912a43bbe1c--\r\n' http://0.0.0.0:41459/api/v1/repos/0/demo/issues/1/assets
POST/repos/{owner}/{repo}/issues/{index}/comments
Server error+4 moreless
  • Server error on undeclared request Content-Type
  • Schema-valid request rejected
  • Undocumented Content-Type
  • Undocumented status code
510

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"body": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/issues/-9223372036854775808/comments

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 201, 403, 404, 423
Response500 Internal Server Error
{"message":"issue does not exist [id: 0, repo_id: 1, index: 63358]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"": false, "\u001fi\u00e4E\u00a9\u0093\u0012\ud9a9\udd3ew\ud86d\ude4d\u0016\u001a": {}, "\u0092v\u009c\u0019\u00ba\u00de<": "", "\u00e5": null, "\u00c1\u000e\u001fP*\u00f9\ud9da\udfe3\u4e6f\u00deR\u00d6\u001d\u0018\u312d\u0003\uda80\udeb4.\ud83d\udd6e": {"\ud9e4\ude55\u001d": 3.0071263061868445e-159}, "body": "Copyright (c) <year> <owner>. \n\nRedistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:\n\n1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.\n\n2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.\n\n3. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"}' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/63358/comments

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 201, 403, 404, 423
Response422 Unprocessable Content
{"message":"[Body]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"body": ""}' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/comments

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"body": "Workbench"}' http://0.0.0.0:41459/api/v1/repos/0/0/issues/-9223372036854775809/comments
POST/repos/{owner}/{repo}/merge-upstreamMissing test data
Server error+4 moreless
  • Server error on undeclared request Content-Type
  • Schema-valid request rejected
  • Undocumented Content-Type
  • Undocumented status code
310

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"branch": "", "ff_only": false}' http://0.0.0.0:41459/api/v1/repos/0/0/merge-upstream

Server errorST101

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json

Undocumented status codeST103

Received: 500
Documented: 200, 400, 404, 409
Response500 Internal Server Error
PANIC: runtime error: invalid memory address or nil pointer dereference
/usr/local/go/src/runtime/panic.go:859 (0x492004)
/go/src/gitea.dev/modules/web/routing/logger_manager.go:87 (0x157033b)
/usr/local/go/src/runtime/panic.go:859 (0x492004)
/usr/local/go/src/runtime/panic.go:336 (0x494eb4)
/usr/local/go/src/runtime/signal_unix.go:931 (0x494e85)
/go/src/gitea.dev/models/repo/repo.go:369 (0x18e22ea)
/go/src/gitea.dev/models/perm/access/repo_permission.go:434 (0x1aac80b)
/go/src/gitea.dev/models/perm/access/ // Output truncated...
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/repos/admin/demo/merge-upstream

Undocumented status codeST103

Received: 422
Documented: 200, 400, 404, 409
Response422 Unprocessable Content
{"message":"[]: json: unable to unmarshal JSON object into Go bool within \"/ff_only\"","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\u0006": [], "ff_only": {}, "branch": null}' http://0.0.0.0:41459/api/v1/repos/admin/demo/merge-upstream

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/merge-upstream
POST/repos/{owner}/{repo}/statuses/{sha}
Server error+4 moreless
  • Server error on undeclared request Content-Type
  • Response violates schema
  • Schema-valid request rejected
  • Undocumented status code
563

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"context": "", "description": "", "state": "pending", "target_url": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/statuses/0

Response violates schemaST108

"" is not one of "pending", "success" or 4 other candidates

Validated against the response schema for status code 201.

Schema at /definitions/CommitStatus/properties/status:

    {
        "enum": [
            "pending",
            "success",
            "error",
            "failure",
            "warning",
            "skipped"
        ],
        "description": "State represents the status state (pending, success, erro...
        "type": "string",
        "x-go-enum-desc": "pending CommitStatusPending is for when the CommitStat...
        "x-go-name": "State"
    }

Value:

    ""
Response201 Created
{"id":1,"status":"","target_url":"","description":"","url":"http://localhost:3000/api/v1/repos/admin/demo/statuses/8caabe76280791ab362a270cac3b5484415dc5ec","context":"","creator":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"1+admin@noreply.localhost","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00 // Output truncated...
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/repos/admin/demo/statuses/8caabe76280791ab362a270cac3b5484415dc5ec

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 201, 400, 404
Response500 Internal Server Error
{"message":"GetCommit[Ṱ̺̺̕o͞ ̷i̲̬͇̪͙n̝̗͕v̟̜̘̦͟o̶̙̰̠kè͚̮̺̪̹̱̤ ̖t̝͕̳̣̻̪͞h̼͓̲̦̳̘̲e͇̣̰̦̬͎ ̢̼̻̱̘h͚͎͙̜̣̲ͅi̦̲̣̰̤v̻͍e̺̭̳̪̰-m̢iͅn̖̺̞̲̯̰d̵̼̟͙̩̼̘̳ ̞̥̱̳̭r̛̗̘e͙p͠r̼̞̻̭̗e̺̠̣͟s̘͇̳͍̝͉e͉̥̯̞̲͚̬͜ǹ̬͎͎̟̖͇̤t͍̬̤͓̼̭͘ͅi̪̱n͠g̴͉ ͏͉ͅc̬̟h͡a̫̻̯͘o̫̟̖͍̙̝͉s̗̦̲.̨̹͈̣]: strconv.ParseInt: parsing \"̖t̝͕̳̣̻̪͞h̼͓̲̦̳̘̲e͇̣̰̦̬͎ ̢̼̻̱̘h͚͎͙̜̣̲ͅi̦̲̣̰̤v̻͍e̺̭̳̪̰-m̢iͅn̖̺̞̲̯̰d̵̼̟͙̩̼̘̳ ̞̥̱̳̭r̛̗̘e͙p͠r̼̞̻̭̗e̺̠̣͟s̘͇̳͍̝͉e͉̥̯̞̲͚̬͜ǹ̬͎͎̟̖͇̤t͍̬̤͓̼̭͘ͅi̪̱n͠g̴͉ ͏͉ͅc̬̟h͡a̫̻̯͘o̫̟̖͍̙̝͉s̗̦̲.̨̹͈̣ missing\": invalid syntax","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\u00cd\u0094-": {"_\r\u0013": [25585208169012656, "\u00c3S", []]}, "state": "failure", "target_url": ":\udb9d\udd98d\u00f6", "context": "\u00b9,\u00a7\u00b2\u0003\u00f4<\u00f2", "description": "\u0080\uda83\ude01\u001d\udbea\uddff\\9\u00bc\u009fK\u00eaFI\u00de\u0019\u0007{\ud996\uddb9\ud949\ude52"}' http://0.0.0.0:41459/api/v1/repos/admin/demo/statuses/%E1%B9%B0%CC%BA%CC%BA%CC%95o%CD%9E%20%CC%B7i%CC%B2%CC%AC%CD%87%CC%AA%CD%99n%CC%9D%CC%97%CD%95v%CC%9F%CC%9C%CC%98%CC%A6%CD%9Fo%CC%B6%CC%99%CC%B0%CC%A0k%C3%A8%CD%9A%CC%AE%CC%BA%CC%AA%CC%B9%CC%B1%CC%A4%20%CC%96t%CC%9D%CD%95%CC%B3%CC%A3%CC%BB%CC%AA%CD%9Eh%CC%BC%CD%93%CC%B2%CC%A6%CC%B3%CC%98%CC%B2e%CD%87%CC%A3%CC%B0%CC%A6%CC%AC%CD%8E%20%CC%A2%CC%BC%CC%BB%CC%B1%CC%98h%CD%9A%CD%8E%CD%99%CC%9C%CC%A3%CC%B2%CD%85i%CC%A6%CC%B2%CC%A3%CC%B0%CC%A4v%CC%BB%CD%8De%CC%BA%CC%AD%CC%B3%CC%AA%CC%B0-m%CC%A2i%CD%85n%CC%96%CC%BA%CC%9E%CC%B2%CC%AF%CC%B0d%CC%B5%CC%BC%CC%9F%CD%99%CC%A9%CC%BC%CC%98%CC%B3%20%CC%9E%CC%A5%CC%B1%CC%B3%CC%ADr%CC%9B%CC%97%CC%98e%CD%99p%CD%A0r%CC%BC%CC%9E%CC%BB%CC%AD%CC%97e%CC%BA%CC%A0%CC%A3%CD%9Fs%CC%98%CD%87%CC%B3%CD%8D%CC%9D%CD%89e%CD%89%CC%A5%CC%AF%CC%9E%CC%B2%CD%9A%CC%AC%CD%9C%C7%B9%CC%AC%CD%8E%CD%8E%CC%9F%CC%96%CD%87%CC%A4t%CD%8D%CC%AC%CC%A4%CD%93%CC%BC%CC%AD%CD%98%CD%85i%CC%AA%CC%B1n%CD%A0g%CC%B4%CD%89%20%CD%8F%CD%89%CD%85c%CC%AC%CC%9Fh%CD%A1a%CC%AB%CC%BB%CC%AF%CD%98o%CC%AB%CC%9F%CC%96%CD%8D%CC%99%CC%9D%CD%89s%CC%97%CC%A6%CC%B2.%CC%A8%CC%B9%CD%88%CC%A3

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 201, 400, 404
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/statuses/%3E%C2%A9
GET/admin/actions/runs
Server error+3 moreless
  • Schema-valid request rejected
  • Schema-violating request accepted
  • Undocumented status code
580

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response400 Bad Request
{"message":"invalid status ","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/admin/actions/runs?event=&branch=&status=&actor=&head_sha=&page=0&limit=0'

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
{"workflow_runs":[],"total_count":0}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/admin/actions/runs?page=null&page=null'

Undocumented status codeST103

Received: 401
Documented: 200, 400, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: x' 'http://0.0.0.0:41459/api/v1/admin/actions/runs?token=%F3%A1%9F%8F%F2%8E%89%AB%F3%BC%97%AB&actor=%22%F2%AD%B5%9C%F0%A4%B4%B0%C3%A3%15L7%C3%89%C2%83.&access_token=2%C3%95%C2%95%C3%8A%C3%9E6%C2%AD%C2%87d%F3%B0%8D%8E&event=&page=4709490296640608256'

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 200, 400, 404
Response500 Internal Server Error
{"message":"user does not exist [uid: 0, name: Á\r6R%񯟉\"\b‘ïæ`íÔF𢇰¢r–򜜖g\u0015[;]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/admin/actions/runs?branch=%C3%95&event=%F3%A5%90%85e%C2%A9&actor=%C3%81%0D6R%25%F1%AF%9F%89%22%08%C2%91%C3%AF%C3%A6%60%C3%AD%C3%94F%F0%A2%87%B0%C2%A2r%C2%96%F2%9C%9C%96g%15%C2%8F%5B%3B'
POST/admin/users/{username}/keys
Server error on undeclared request Content-Type+3 moreless
  • Schema-valid request rejected
  • Undocumented Content-Type
  • Undocumented status code
584

Undocumented status codeST103

Received: 404
Documented: 201, 403, 422
Response404 Not Found
{"message":"user redirect does not exist [name: 0]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"key": "", "read_only": false, "title": ""}' http://0.0.0.0:41459/api/v1/admin/users/0/keys

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"key": "", "read_only": false, "title": ""}' http://0.0.0.0:41459/api/v1/admin/users/0/keys

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"Invalid key content: extractTypeFromBase64Key: invalid key format: %!w(<nil>)","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"key": "0BSD", "title": "First issue"}' http://0.0.0.0:41459/api/v1/admin/users/workbench-user/keys

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\u00c8g": false, "Of\udbf0\udc74\udbcb\udee5%\u00fc-4\ud8f8\udc32\u0096\u00b9": {}, "key": "CC-BY-4.0", "read_only": true, "title": "\u008b\u00a2"}' http://0.0.0.0:41459/api/v1/admin/users/workbench/keys
POST/admin/users/{username}/orgs
Server error+3 moreless
  • Server error on undeclared request Content-Type
  • Schema-valid request rejected
  • Undocumented status code
412

Undocumented status codeST103

Received: 404
Documented: 201, 403, 422
Response404 Not Found
{"message":"user redirect does not exist [name: 0]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"description": "", "email": "", "full_name": "", "location": "", "repo_admin_change_team_access": false, "username": "", "visibility": "public", "website": ""}' http://0.0.0.0:41459/api/v1/admin/users/0/orgs

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"description": "", "email": "", "full_name": "", "location": "", "repo_admin_change_team_access": false, "username": "", "visibility": "public", "website": ""}' http://0.0.0.0:41459/api/v1/admin/users/0/orgs

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 201, 403, 422
Response500 Internal Server Error
{"message":"user is not allowed to create organizations","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"username": "admin"}' http://0.0.0.0:41459/api/v1/admin/users/workbench-user/orgs

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 1 additional property not defined in the schema (``). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.
Response422 Unprocessable Content
{"message":"[UserName]: invalid username","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"": [true, 1346185376775520.0, true], "visibility": "limited", "location": "", "username": "\u009e\u00eb\u00b1R", "repo_admin_change_team_access": false, "email": ""}' http://0.0.0.0:41459/api/v1/admin/users/workbench-user/orgs
POST/admin/users/{username}/rename
Server error on undeclared request Content-Type+3 moreless
  • Schema-valid request rejected
  • Undocumented Content-Type
  • Undocumented status code
340

Undocumented status codeST103

Received: 404
Documented: 204, 403, 422
Response404 Not Found
{"message":"user redirect does not exist [name: 0]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"new_username": ""}' http://0.0.0.0:41459/api/v1/admin/users/0/rename

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"new_username": ""}' http://0.0.0.0:41459/api/v1/admin/users/0/rename

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[NewName]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"new_username": ""}' http://0.0.0.0:41459/api/v1/admin/users/workbench-user/rename

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
  1. GET/user/emails
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/emails
  2. POST/admin/users/0/renamefailed here
    curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"A\u00df\u4dc1\u0083": true, "`R": [{"\u008c": "d\u00a6\ud9d6\udead", "": 1.175494351e-38, "\u00a1\ud8e2\ude59\ud8f1\udc66\u0097\u0002": null}], "new_username": "\fM"}' http://0.0.0.0:41459/api/v1/admin/users/0/rename
POST/markdown/raw
Server error on undeclared request Content-Type+3 moreless
  • JSON deserialization error
  • Missing Content-Type header
  • Schema-violating request accepted
316

JSON deserialization errorST109

Response must be valid JSON with 'Content-Type: application/json' header:

  Expecting value: line 1 column 1 (char 0)

Missing Content-Type headerST104

The following media types are documented in the schema:
- `text/html`
Response200 OK
<EMPTY>
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: text/plain' http://0.0.0.0:41459/api/v1/markdown/raw

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: Missing request body
Response200 OK
<EMPTY>
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/markdown/raw

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/markdown/raw
DELETE/orgs/{org}
Server error+3 moreless
  • Missing Content-Type header
  • Undocumented Content-Type
  • Undocumented status code
172

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench

Undocumented status codeST103

Received: 401
Documented: 204, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Sudo: /<xp:W2\M3' -H 'Authorization;' -H 'X-GITEA-OTP: m' 'http://0.0.0.0:41459/api/v1/orgs/%C3%9E%F1%AB%AA%9E%F0%A7%9C%AC%F2%9F%BA%A7%C3%8B?token=gdt_D9OBLlvCu3V3p31uTnFn6KRHrh2E1vB5qjEi1wJKswb'

Undocumented status codeST103

Received: 403
Documented: 204, 404
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X DELETE -H 'Authorization;' -H 'Sudo: /<xp:W2\M3' -H 'X-GITEA-OTP: m' 'http://0.0.0.0:41459/api/v1/orgs/%C3%9E%F1%AB%AA%9E%F0%A7%9C%AC%F2%9F%BA%A7%C3%8B?access_token='

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 204, 404
Response500 Internal Server Error
{"message":"user still has ownership of repositories [uid: 7]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench
GET/orgs/{org}/actions/runs
Server error+3 moreless
  • Schema-valid request rejected
  • Schema-violating request accepted
  • Undocumented status code
269

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response400 Bad Request
{"message":"invalid status 񃀸W\u001fÌ񙧣R\u0002è񘪸†󌣃†[Ñ􇒳","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/orgs/workbench/actions/runs?limit=1181887&head_sha=%C2%91X&actor=%F2%A2%B5%9D%23%C2%9At&page=1173270&status=%F1%83%80%B8W%1F%C3%8C%F1%99%A7%A3R%02%C3%A8%F1%98%AA%B8%C2%86%F3%8C%A3%83%C2%86%5B%C3%91%F4%87%92%B3'

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 200, 400, 404
Response500 Internal Server Error
{"message":"user does not exist [uid: 0, name: ^='KSx>U]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/orgs/workbench/actions/runs?branch=&actor=%5E%3D%27KSx%3EU'

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `limit` in query - violates `type` at /properties/limit (was integer, became array)
Response200 OK
{"workflow_runs":[],"total_count":0}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/orgs/workbench/actions/runs?limit=false'
GET/orgs/{org}/activities/feeds
API accepts requests without authentication+3 moreless
  • Response violates schema
  • Schema-violating request accepted
  • Undocumented status code
427

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /orgs/{org}/activities/feeds`
Response200 OK
[]
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/orgs/workbench/activities/feeds

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `limit` in query - violates `type` at /properties/limit (was integer, became string)
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/orgs/workbench/activities/feeds?date=0980-11-01&page=15989&limit=%C2%A8%C2%B09%F2%B3%8E%9FK%C3%93-%F2%89%AD%A98%17%C3%8Ej%C2%81%C3%9B%C3%88%06%F0%B3%BA%99%F0%91%AA%B9%15%C3%BC%C2%8D%C3%95B%24%C3%89%3A%C2%9A%F0%B5%B2%B6H%F2%8F%94%86'

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: ,V' 'http://0.0.0.0:41459/api/v1/orgs/workbench/activities/feeds?page=-281&access_token=%25%C3%B6%C2%8C%00F%C2%9A%02&token=%C2%BE%F1%AB%AA%8Da&limit=661&date=1242-07-12'

Response violates schemaST1082 violations

"" is not a "email"

Validated against the response schema for status code 200.

Schema at /definitions/User/properties/email:

    {
        "format": "email",
        "type": "string",
        "x-go-name": "Email"
    }

Value:

    ""
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/Comment:

    {
        "type": "object",
        "description": "Comment represents a comment on a commit or issue",
        "properties": {
            "assets": {
                "description": "Attachments contains files attached to the comment",
                "type": "array",
                "items": {
                    "$ref": "#/components/schemas/Attachment"
                },
                "x-go-name": "Attachments"
            },
            "body": {
                "description": "Body contains the comment text content",
                "type": "string",
                "x-go-name": "Body"
            },
            "created_at": {
                "type": "string",
        // Output truncated...
    }

Value:

    null
Response200 OK
[{"id":186,"user_id":7,"op_type":"create_repo","act_user_id":1,"act_user":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"admin/AGPL-3.0","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"ÿL27ô𴰘&s¡\u0014񧀤𦁙Ċ¯\t򦟪","is_admin":true,"last_login":"1970-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":true,"prohi // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/activities/feeds
POST/orgs/{org}/avatar
Server error on undeclared request Content-Type+3 moreless
  • Schema-valid request rejected
  • Undocumented Content-Type
  • Undocumented status code
293

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"image": ""}' http://0.0.0.0:41459/api/v1/orgs/0/avatar

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 204, 404
Response422 Unprocessable Content
{"message":"[Image]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/orgs/workbench/avatar

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 3 additional properties not defined in the schema (`
[F`, `
򢀰ªÙE²`, `°8R𞪽Óç°򗛛𠖌󓾦􇺃`). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.

Undocumented status codeST103

Received: 400
Documented: 204, 404
Response400 Bad Request
{"message":"illegal base64 data at input byte 16","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\n[F": {}, "\r\u0007\uda48\udc30\u00aa\u00d9E\u00b2": {}, "\u00b08R\b\ud83a\udebd\u00d3\u00e7\u00b0\uda1d\udedb\ud841\udd8c\udb0f\udfa6\udbdf\ude83": [-1.7578617637982282e+16, -5.826486918991464e+16, -2.8314429775698896e+16], "image": "AllowHeaderMismatch"}' http://0.0.0.0:41459/api/v1/orgs/workbench/avatar

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/0/avatar

Undocumented status codeST103

Received: 401
Documented: 204, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: -Md.W' -H 'Content-Type: application/json' -d '{"n\u0018'"'"'\u00b1x": [-93832, false, false], "\u00d1\ud8df\udf70\u007f": -62, "\u00cb\u00b3\u0015": {"": -5.939560164722248e+16, "\ud810\ude5a\ud84f\udc5d\u00c9": -4181, "\u009b)\u00a5\ud9d3\udfca\u0086\udaba\udca4\u00b5\u009f\uda9f\udce5\udaa8\udf1d\b\u00d4": null}, "\u00f0\u00beA\u008f\u00d2\ud97d\udf5c\u00c0\u00e1Xa\u00a8\u00c6#H": [[], {"4\u00f5\u00a8\u008a\ud83c\udda0\uda75\ude29>W\u0019": -1.8775199553494388e+16, "\u00c3\u00a3\u0001\u00bf\u00d0\u00e4": "\u009f\u00c9l\u0019", "": 3.286414224978647e-59}, {}], "": {"\ud94e\udfa8\ud8ea\udf26": -2.462753985854931e-78}}' 'http://0.0.0.0:41459/api/v1/orgs/workbench/avatar?access_token=%F0%B5%B6%A2%F2%A7%96%80%F1%B9%87%89%C3%B3%3F%C2%84%F0%92%AD%91%F0%95%85%99&sudo=%2F%C3%BE%F0%9E%BC%86%C3%B00l&token=gdt_FgbJia27VFWIHiqc8JYzGxw37Xj9bXf5EkZXSqWQwyv'
POST/orgs/{org}/hooks
Server error on undeclared request Content-Type+3 moreless
  • Schema-valid request rejected
  • Undocumented Content-Type
  • Undocumented status code
340

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"active": false, "authorization_header": "", "branch_filter": "", "config": {}, "events": [], "name": "", "type": "dingtalk"}' http://0.0.0.0:41459/api/v1/orgs/0/hooks

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 201, 404
Response422 Unprocessable Content
{"message":"Missing config option: url","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"config": {}, "type": "gogs"}' http://0.0.0.0:41459/api/v1/orgs/workbench/hooks

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"config": {}, "type": "gogs"}' http://0.0.0.0:41459/api/v1/orgs/0/hooks

Undocumented status codeST103

Received: 401
Documented: 201, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: IkA9yVi*dV2' -H 'Sudo: L' -H 'X-GITEA-OTP: "T>zYDKz' -H 'Content-Type: application/json' -d '{"\u00b7Mt^\ud9bf\uddc1\uda5e\udc32\ud941\udee8\udb59\udef6,k\u00a5": {"\u00be": {}}, "events": ["G", "\u00c1\u00a1\ud9d9\udc04\u0089", "=", ""], "authorization_header": "", "name": "\u00b0", "config": {}, "type": "msteams", "active": true, "branch_filter": "\u00ca"}' 'http://0.0.0.0:41459/api/v1/orgs/started_at/hooks?token=gdt_cOVnCMcLyABeu6KFtume2El5OaWoBbO1ti8ujRaMrz5'
DELETE/orgs/{org}/members/{username}
Server error+3 moreless
  • Missing Content-Type header
  • Undocumented Content-Type
  • Undocumented status code
272

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/members/admin

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/members/admin

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 204, 404
Response500 Internal Server Error
{"message":"user is the last member of owner team [uid: 4]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/members/workbench-user
POST/orgs/{org}/rename
Server error on undeclared request Content-Type+3 moreless
  • Missing Content-Type header
  • Schema-valid request rejected
  • Undocumented status code
229

Undocumented status codeST103

Received: 404
Documented: 204, 403, 422
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"new_name": ""}' http://0.0.0.0:41459/api/v1/orgs/0/rename

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"new_name": ""}' http://0.0.0.0:41459/api/v1/orgs/0/rename

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[NewName]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"new_name": ""}' http://0.0.0.0:41459/api/v1/orgs/workbench/rename

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"new_name": "X"}' http://0.0.0.0:41459/api/v1/orgs/workbench/rename

Undocumented status codeST103

Received: 401
Documented: 204, 403, 422
Response401 Unauthorized
{"message":"token is required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization;' -H 'Content-Type: application/json' -d '{"new_name": ""}' http://0.0.0.0:41459/api/v1/orgs/workbench/rename
GET/orgs/{org}/repos
API accepts requests without authentication+3 moreless
  • Response violates schema
  • Schema-violating request accepted
  • Undocumented status code
433

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /orgs/{org}/repos`
Response200 OK
[]
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/orgs/workbench/repos

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - violates `type` at /properties/page (was integer, became number)
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/orgs/workbench/repos?page=6.358878283824217e-221&limit=10461800757885691904'

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'X-GITEA-OTP: &=' -H 'Sudo: Idmf'"'"'!!#<F<}]([' -H 'Authorization;' 'http://0.0.0.0:41459/api/v1/orgs/workbench/repos?token=%C2%89'

Response violates schemaST108

"" is not a "email"

Validated against the response schema for status code 200.

Schema at /definitions/User/properties/email:

    {
        "format": "email",
        "type": "string",
        "x-go-name": "Email"
    }

Value:

    ""
Response200 OK
[{"id":61,"owner":{"id":7,"login":"0","type":"Organization","login_name":"","source_id":0,"full_name":"","email":"","avatar_url":"http://0.0.0.0:41459/avatars/92a1282276845e34fead5db7388bed6d43620afcf7646e945fd310f382a77a71","html_url":"http://0.0.0.0:41459/0","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T12:29:52Z","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":1,"followi // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/repos

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/search`
Response200 OK
{"ok":true,"data":[]}
Reproduce
curl -X GET 'http://0.0.0.0:41459/api/v1/repos/search?q=&topic=true&includeDesc=true&uid=-9223372036854775808&priority_owner_id=-9223372036854775808&team_id=1&starredBy=-9223372036854775808&private=true&is_private=true&template=true&archived=true&mode=&exclusive=true&sort=&order=&page=0&limit=0'

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `uid` in query - uid: Value greater than maximum
Response200 OK
{"ok":true,"data":[]}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/search?uid=9223372036854775808'

Response violates schemaST108

"" is not a "email"

Validated against the response schema for status code 200.

Schema at /definitions/User/properties/email:

    {
        "format": "email",
        "type": "string",
        "x-go-name": "Email"
    }

Value:

    ""
Response200 OK
{"ok":true,"data":[{"id":31,"owner":{"id":4,"login":"workbench-user","type":"Organization","login_name":"","source_id":0,"full_name":"ÿ\u001c‘","email":"","avatar_url":"http://0.0.0.0:41459/avatars/fa25ceee0d7be94b95c0208f7456232d4e85b901ba9bb49d8219ba29e2313dc7","html_url":"http://0.0.0.0:41459/workbench-user","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:59:28Z","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":" // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/search?priority_owner_id=-1219'

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"Invalid sort mode: \"³\\U00056565\"","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/search?includeDesc=false&sort=%C2%B3%F1%96%95%A5&team_id=1'
GET/repos/{owner}/{repo}/actions/runs
Server error+3 moreless
  • Schema-valid request rejected
  • Schema-violating request accepted
  • Undocumented status code
347

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response400 Bad Request
{"message":"invalid status á","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/actions/runs?branch=JM%F3%96%93%82%F1%80%99%80cVE%F3%AB%A7%AF%C2%95&status=%C3%A1&head_sha=%C3%B0&actor=&page=2951507148&limit=12785562&event=m&exclude_pull_requests=false'

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 200, 400, 404
Response500 Internal Server Error
{"message":"user does not exist [uid: 0, name: 󹬿𩟂ú]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/actions/runs?exclude_pull_requests=true&actor=%F3%B9%AC%BF%F0%A9%9F%82%C3%BA'

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - violates `type` at /properties/page (was integer, became boolean)
Response200 OK
{"workflow_runs":[],"total_count":0}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/actions/runs?branch=&page=true'
POST/repos/{owner}/{repo}/actions/variables/{variablename}
Server error on undeclared request Content-Type+3 moreless
  • Schema-valid request rejected
  • Undocumented Content-Type
  • Undocumented status code
454

Undocumented status codeST103

Received: 404
Documented: 201, 400, 409, 500
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"description": "", "value": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/actions/variables/0

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"description": "", "value": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/actions/variables/0

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 201, 400, 409, 500
Response422 Unprocessable Content
{"message":"[Value]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"value": ""}' http://0.0.0.0:41459/api/v1/repos/admin/demo/actions/variables/0

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response400 Bad Request
{"message":"name must start with a letter or underscore and contain only letters, numbers, and underscores","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"value": "\u001eAR$\u0095"}' http://0.0.0.0:41459/api/v1/repos/admin/demo/actions/variables/%F3%BA%9D%82%C2%82%F1%B3%9C%83h

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"value": ""}' http://0.0.0.0:41459/api/v1/repos/0/demo/actions/variables/%26%C3%B0%C2%A5%C3%9B%C2%B9f%C2%90%3Db%23%C3%BE%27
POST/repos/{owner}/{repo}/branch_protections
Server error on undeclared request Content-Type+3 moreless
  • Response violates schema
  • Schema-valid request rejected
  • Undocumented status code
629

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"approvals_whitelist_teams": [], "approvals_whitelist_username": [], "block_admin_merge_override": false, "block_on_codeowner_reviews": false, "block_on_official_review_requests": false, "block_on_outdated_branch": false, "block_on_rejected_reviews": false, "branch_name": "", "bypass_allowlist_teams": [], "bypass_allowlist_usernames": [], "dismiss_stale_approvals": false, "enable_approvals_whitelist": false, "enable_bypass_allowlist": false, "enable_force_push": false, "enable_force_push_allowlist": false, "enable_merge_whitelist": false, "enable_push": false, "enable_push_whitelist": false, "enable_status_check": false, "force_push_allowlist_deploy_keys": false, "force_push_allowlist_teams": [], "force_push_allowlist_usernames": [], "ignore_stale_approvals": false, "merge_whitelist_teams": [], "merge_whitelist_usernames": [], "priority": 0, "protected_file_patterns": "", "push_whitelist_deploy_keys": false, "push_whitelist_teams": [], "push_whitelist_usernames": [], "require_signed_commits": false, "required_approvals": 0, "rule_name": "", "status_check_contexts": [], "unprotected_file_patterns": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/branch_protections

Response violates schemaST108

null is not of type "array"

Validated against the response schema for status code 201.

Schema at /properties/status_check_contexts:

    {
        "type": "array",
        "items": {
            "type": "string"
        },
        "x-go-name": "StatusCheckContexts"
    }

Value:

    null
Response201 Created
{"branch_name":"main","rule_name":"main","priority":1,"enable_push":false,"enable_push_whitelist":false,"push_whitelist_usernames":[],"push_whitelist_teams":[],"push_whitelist_deploy_keys":false,"enable_force_push":false,"enable_force_push_allowlist":false,"force_push_allowlist_usernames":[],"force_push_allowlist_teams":[],"force_push_allowlist_deploy_keys":false,"enable_merge_whitelist":false,"merge_whitelist_usernames":[],"merge_whitelist_teams":[],"enable_bypass_allowlist":false,"bypass_allowlist_usernam // Output truncated...
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"branch_name": "main"}' http://0.0.0.0:41459/api/v1/repos/admin/demo/branch_protections

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 1 additional property not defined in the schema (`3Ë`). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.

Undocumented status codeST103

Received: 400
Documented: 201, 403, 404, 422, 423
Response400 Bad Request
{"message":"both rule_name and branch_name are empty","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"3\u001c\u00cb": {"\u00d4\u008c|E\u0092\u00e5\u00d5\u00ea": [], "\udad6\udeca\u00f3\u000e": -2.2683283406227778e+225, "\ud8e7\udc5e\u00d0": {"\u0096": null}}, "dismiss_stale_approvals": false, "enable_force_push_allowlist": false, "push_whitelist_deploy_keys": false, "force_push_allowlist_deploy_keys": true}' http://0.0.0.0:41459/api/v1/repos/admin/demo/branch_protections

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/branch_protections

Undocumented status codeST103

Received: 401
Documented: 201, 403, 404, 422, 423
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'X-GITEA-OTP: }' -H 'Authorization: ekcm' -H $'Sudo: c3?5\t(^m`' -H 'Content-Type: application/json' -d '{"X\u0091\udaa7\udc28U}\u00a0\udb4c\ude8c\udbfc\udf42": [], "\u00a4t\u00d5\u00fc\u00a5\u000e\u00a4U\u00f6": [[], {"\u008f\u00ad\u00d7e\u0096J\u00f8w\ud98b\ude78\f\u0002": 7.063727602545358e+16, "": "\udb04\udf19", "\u0089n\ud263\u001b": 207444}, {}], "status_check_contexts": [" \ud8f6\ude76"], "branch_name": "\ud8d7\udf22\u00ee'"'"'a\u00a7Q\u00bb"}' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/branch_protections?token=gdt_XBh3cShtrb7CLSDZD6vE0v7kxiEUeqWktYMtAFxTbCP'
POST/repos/{owner}/{repo}/branches
Server error on undeclared request Content-Type+3 moreless
  • Response violates schema
  • Schema-valid request rejected
  • Undocumented status code
500

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"new_branch_name": "", "old_branch_name": "", "old_ref_name": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/branches

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 201, 403, 404, 409, 423
Response422 Unprocessable Content
{"message":"[BranchName]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"new_branch_name": ""}' http://0.0.0.0:41459/api/v1/repos/admin/demo/branches

Response violates schemaST1084 violations

null is not of type "array"

Validated against the response schema for status code 201.

Schema at /definitions/PayloadCommit/properties/added:

    {
        "type": "array",
        "description": "List of files added in this commit",
        "items": {
            "type": "string"
        },
        "x-go-name": "Added"
    }

Value:

    null
null is not of type "array"

Validated against the response schema for status code 201.

Schema at /definitions/PayloadCommit/properties/modified:

    {
        "type": "array",
        "description": "List of files modified in this commit",
        "items": {
            "type": "string"
        },
        "x-go-name": "Modified"
    }

Value:

    null
null is not of type "array"

Validated against the response schema for status code 201.

Schema at /definitions/PayloadCommit/properties/removed:

    {
        "type": "array",
        "description": "List of files removed in this commit",
        "items": {
            "type": "string"
        },
        "x-go-name": "Removed"
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 201.

Schema at /definitions/PayloadUser:

    {
        "type": "object",
        "description": "PayloadUser represents the author or committer of a commit",
        "properties": {
            "email": {
                "type": "string",
                "format": "email",
                "x-go-name": "Email"
            },
            "name": {
                "description": "Full name of the commit author",
                "type": "string",
                "x-go-name": "Name"
            },
            "username": {
                "description": "username of the user",
                "type": "string",
                "x-go-name": "UserName"
            }
        // Output truncated...
    }

Value:

    null
Response201 Created
{"name":"ñ","commit":{"id":"8caabe76280791ab362a270cac3b5484415dc5ec","message":"Initial commit\n","url":"http://localhost:3000/admin/demo/commit/8caabe76280791ab362a270cac3b5484415dc5ec","author":{"name":"admin","email":"admin@example.com","username":"admin"},"committer":{"name":"admin","email":"admin@example.com","username":"admin"},"verification":{"verified":false,"reason":"gpg.error.not_signed_commit","signature":"","signer":null,"payload":""},"timestamp":"2026-10-19T11:55:08Z","added":null,"removed":nu // Output truncated...
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"": [[2805485185, 25564], [], {"\ud8c7\udf84SO\u00f9\f\udbff\udccd\u0000\u00c2X\u00f9\u0016u\u001f": null}], "\u00b4\u0084\u00a2j\u00ba\u00c4\u00c1\u00db\u0017": [-4.80436241568906e-272, -12560, null], "\u00f3\u001c": {"\u008f+\u00e9\ud972\udddcD\ud863\udeb1\u0004$\u00b6": false}, "Hh\ud88b\udcad\u00c3S0\u00c6\u00c6fB0\u008b\uda1f\udf52\u0001\u00cc:\uda6f\udfb4\u00af\u009c\udb87\udceas\u0014O": [{"": -71906850, "\t\u0007": -3.6953438045715837e+283, "\u00b4": null}], "yt\n": [[false, true]], "new_branch_name": "\u00f1"}' http://0.0.0.0:41459/api/v1/repos/admin/demo/branches
GET/repos/{owner}/{repo}/contents-ext/{filepath}
API accepts requests without authentication+3 moreless
  • Response violates schema
  • Schema-valid request rejected
  • Undocumented status code
334

Response violates schemaST1084 violations

null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/ContentsResponse/properties/content:

    {
        "type": "string",
        "description": "`content` is populated when `type` is `file`, otherwise n...
        "x-go-name": "Content"
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/ContentsResponse/properties/encoding:

    {
        "type": "string",
        "description": "`encoding` is populated when `type` is `file`, otherwise ...
        "x-go-name": "Encoding"
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/ContentsResponse/properties/submodule_git_url:

    {
        "type": "string",
        "description": "`submodule_git_url` is populated when `type` is `submodul...
        "x-go-name": "SubmoduleGitURL"
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/ContentsResponse/properties/target:

    {
        "type": "string",
        "description": "`target` is populated when `type` is `symlink`, otherwise...
        "x-go-name": "Target"
    }

Value:

    null
Response200 OK
{"file_contents":{"name":"0","path":"0","sha":"e69de29bb2d1d6434b8b29ae775ad8c2e48c5391","type":"file","mode":"100644","size":0,"encoding":null,"content":null,"target":null,"url":"http://localhost:3000/api/v1/repos/admin/demo/contents/0?ref=main","html_url":"http://0.0.0.0:41459/admin/demo/src/branch/main/0","git_url":"http://0.0.0.0:41459/api/v1/repos/admin/demo/git/blobs/e69de29bb2d1d6434b8b29ae775ad8c2e48c5391","download_url":"http://0.0.0.0:41459/admin/demo/raw/branch/main/0","submodule_git_url":null,"_ // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/contents-ext/0

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/contents-ext/{filepath}`
Response200 OK
{"file_contents":{"name":"0","path":"0","sha":"e69de29bb2d1d6434b8b29ae775ad8c2e48c5391","type":"file","mode":"100644","size":0,"encoding":null,"content":null,"target":null,"url":"http://localhost:3000/api/v1/repos/admin/demo/contents/0?ref=main","html_url":"http://0.0.0.0:41459/admin/demo/src/branch/main/0","git_url":"http://0.0.0.0:41459/api/v1/repos/admin/demo/git/blobs/e69de29bb2d1d6434b8b29ae775ad8c2e48c5391","download_url":"http://0.0.0.0:41459/admin/demo/raw/branch/main/0","submodule_git_url":null,"_ // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/contents-ext/0

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 400
Documented: 200, 404
Response400 Bad Request
{"message":"unknown include option \"\\U001094a5袑@\\U000dd635\\U00037c9d\\U000ab8b5óëÁ¼\\x7f\\u009b\\u0080Ì\\u008d°/ãü\\U000d59ec\"","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/contents-ext/H%C3%B5%0B%F2%BD%87%BF?ref=&includes=%F4%89%92%A5%E8%A2%91%40%F3%9D%98%B5%F0%B7%B2%9D%F2%AB%A2%B5%C3%B3%C3%AB%C3%81%C2%BC%7F%C2%9B%C2%80%C3%8C%C2%8D%C2%B0%2F%C3%A3%C3%BC%F3%95%A7%AC'

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Sudo: BB#V"My&Z9' -H 'Authorization: MY&' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/contents-ext/%C2%AA?token=gdt_XBh3cShtrb7CLSDZD6vE0v7kxiEUeqWktYMtAFxTbCP&includes=%C2%86%F1%A1%91%B1%C2%BC%C3%B2%25%3B6%2A%F0%AE%A7%90%05eMn%C3%99%C3%99%05%C3%9D%C2%A52h%11%C3%A9%C2%A9%C3%A6%C2%AF%1C&sudo=&ref=_%F0%93%86%89%C3%AAW%23%C2%B8K%C3%B8%3E&access_token=%CE%A9%E2%89%88%C3%A7%E2%88%9A%E2%88%AB%CB%9C%C2%B5%E2%89%A4%E2%89%A5%C3%B7%C3%A5%C3%9F%E2%88%82%C6%92%C2%A9%CB%99%E2%88%86%CB%9A%C2%AC%E2%80%A6%C3%A6%C5%93%E2%88%91%C2%B4%C2%AE%E2%80%A0%C2%A5%C2%A8%CB%86%C3%B8%CF%80%E2%80%9C%E2%80%98%C2%A1%E2%84%A2%C2%A3%C2%A2%E2%88%9E%C2%A7%C2%B6%E2%80%A2%C2%AA%C2%BA%E2%80%93%E2%89%A0%C2%B8%CB%9B%C3%87%E2%97%8A%C4%B1%CB%9C%C3%82%C2%AF%CB%98%C2%BF%C3%85%C3%8D%C3%8E%C3%8F%CB%9D%C3%93%C3%94%EF%A3%BF%C3%92%C3%9A%C3%86%E2%98%83%C5%92%E2%80%9E%C2%B4%E2%80%B0%CB%87%C3%81%C2%A8%CB%86%C3%98%E2%88%8F%E2%80%9D%E2%80%99%60%E2%81%84%E2%82%AC%E2%80%B9%E2%80%BA%EF%AC%81%EF%AC%82%E2%80%A1%C2%B0%C2%B7%E2%80%9A%E2%80%94%C2%B1'
POST/repos/{owner}/{repo}/contents/{filepath}
Server error on undeclared request Content-Type+3 moreless
  • Response violates schema
  • Schema-valid request rejected
  • Schema-violating request accepted
503

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"author": {"email": "0@0.com", "name": ""}, "branch": "", "committer": {"email": "0@0.com", "name": ""}, "content": "", "dates": {"author": "2000-01-01T00:00:00Z", "committer": "2000-01-01T00:00:00Z"}, "force_push": false, "message": "", "new_branch": "", "signoff": false}' http://0.0.0.0:41459/api/v1/repos/0/0/contents/0

Response violates schemaST1083 violations

null is not of type "object"

Validated against the response schema for status code 201.

Schema at /definitions/PayloadUser:

    {
        "type": "object",
        "description": "PayloadUser represents the author or committer of a commit",
        "properties": {
            "email": {
                "type": "string",
                "format": "email",
                "x-go-name": "Email"
            },
            "name": {
                "description": "Full name of the commit author",
                "type": "string",
                "x-go-name": "Name"
            },
            "username": {
                "description": "username of the user",
                "type": "string",
                "x-go-name": "UserName"
            }
        // Output truncated...
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 201.

Schema at /definitions/ContentsResponse/properties/submodule_git_url:

    {
        "type": "string",
        "description": "`submodule_git_url` is populated when `type` is `submodul...
        "x-go-name": "SubmoduleGitURL"
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 201.

Schema at /definitions/ContentsResponse/properties/target:

    {
        "type": "string",
        "description": "`target` is populated when `type` is `symlink`, otherwise...
        "x-go-name": "Target"
    }

Value:

    null
Response201 Created
{"content":{"name":"0","path":"0","sha":"e69de29bb2d1d6434b8b29ae775ad8c2e48c5391","last_commit_sha":"fc3aaa3861ba9956a8b17b02fb198b2c6fb2f9ed","last_committer_date":"2026-10-19T12:00:10Z","last_author_date":"2026-10-19T12:00:10Z","type":"file","mode":"100644","size":0,"encoding":"base64","content":"","target":null,"url":"http://localhost:3000/api/v1/repos/admin/demo/contents/0?ref=main","html_url":"http://0.0.0.0:41459/admin/demo/src/branch/main/0","git_url":"http://0.0.0.0:41459/api/v1/repos/admin/demo/gi // Output truncated...
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"content": ""}' http://0.0.0.0:41459/api/v1/repos/admin/demo/contents/0

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 5 additional properties not defined in the schema (`V󶠗򰶔àõ`, `򎤯½򞫭`, `𥣌` and 2 more). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.
Response422 Unprocessable Content
{"message":"illegal base64 data at input byte 1","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\u009d\u000e\ud9fa\udd2f\u00bd\uda3a\udeed": {}, "\ud90b\udcfdh\u00b4\u0014": [null], "\ud935\udc10\u00b8\u00d3!": [{"\u000e\u00a4\u0017\u00e1": 286}, [{"\u00baNa\u00e2\u00e1~\ud857\udd91": null, "\u00c9\u00ee\u00ffs\u008c\ud8a9\udee9V|\u00e6\u00bd\u00f5\udbaf\udde6\udac4\udea5": true, "\u00f8": ".exe"}]], "\u0014\u008dV\udb9a\udc17\uda83\udd94\u00e0\u00c3\u00b5": ["\u009a\u00b4W\ud844\udfdd\u00d9\u00c8\u00f2\u0089\u00ee", true, false], "\ud856\udccc\f": {"6,": -215, "": null, "\udbad\udc99X\u00edm\f": false}, "force_push": true, "signoff": true, "content": "z>", "committer": {}}' http://0.0.0.0:41459/api/v1/repos/admin/demo/contents/%C2%B0

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component:
  - header: violates `format` at /properties/Authorization
  - body: violates `required` at /$ref/schema000001 (was "")
Response201 Created
{"content":{"name":"󾳑éC","path":"󾳑éC","sha":"e69de29bb2d1d6434b8b29ae775ad8c2e48c5391","last_commit_sha":"29aedd0d7588d49531b59a3680edb35ad36670c0","last_committer_date":"2026-10-19T12:00:13Z","last_author_date":"2026-10-19T12:00:13Z","type":"file","mode":"100644","size":0,"encoding":"base64","content":"","target":null,"url":"http://localhost:3000/api/v1/repos/admin/demo/contents/%F3%BE%B3%91%C3%A9C?ref=main","html_url":"http://0.0.0.0:41459/admin/demo/src/branch/main/%F3%BE%B3%91%C3%A9C","git_url":"http:// // Output truncated...
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/repos/admin/demo/contents/%F3%BE%B3%91%C3%A9C
POST/repos/{owner}/{repo}/forksMissing test data
Server error+3 moreless
  • Server error on undeclared request Content-Type
  • Schema-valid request rejected
  • Undocumented status code
569

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"name": "", "organization": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/forks

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/forks

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 202, 403, 404, 409, 422
Response500 Internal Server Error
{"message":"name is invalid [“]: must be valid alpha or numeric or dash(-_) or dot characters","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"L\u000b\u00ee": [], "7\u00deL\udbc3\ude93": {"": 5.695902432894653e-260, "\u00da\u00bd\u00cbN\u0090": 1.7976931348623157e+308, "s\udb1f\uded1\ud9eb\udc6b\udaf7\uddd4\u0085\u00f3": true}, "Y\udb20\uddc1": {"[{c\u009f\u9b3f": [-4847]}, "\u00b0": [], "\u00a6\ud9f6\uddc25\u00deJ\udb3d\udfa9\ud8e7\udf4b\u00b7\u00f1\u00c8": {}, "name": "\u0093"}' http://0.0.0.0:41459/api/v1/repos/admin/demo/forks
GET/repos/{owner}/{repo}/git/trees/{sha}
API accepts requests without authentication+3 moreless
  • Response violates schema
  • Schema-valid request rejected
  • Undocumented status code
381

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/git/trees/{sha}`
Response200 OK
{"sha":"276239af9bf2dbe6887d4d620afc2b0e1d93ab8c","url":"http://0.0.0.0:41459/api/v1/repos/admin/demo/git/trees/276239af9bf2dbe6887d4d620afc2b0e1d93ab8c","tree":[{"path":"README.md","mode":"100644","type":"blob","size":8,"sha":"45d053e6af47b13ff2f184275f260c8abfc963bf","url":"http://localhost:3000/api/v1/repos/admin/demo/git/blobs/45d053e6af47b13ff2f184275f260c8abfc963bf"}],"truncated":false,"page":1,"total_count":1}
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/git/trees/8caabe76280791ab362a270cac3b5484415dc5ec

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response400 Bad Request
{"message":"sha not found [§]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/git/trees/%C2%A7?page=1080&per_page=8425&recursive=false'

Response violates schemaST108

null is not of type "array"

Validated against the response schema for status code 200.

Schema at /definitions/GitTreeResponse/properties/tree:

    {
        "type": "array",
        "description": "Entries contains the tree entries (files and directories)",
        "items": {
            "$ref": "#/components/schemas/GitEntry"
        },
        "x-go-name": "Entries"
    }

Value:

    null
Response200 OK
{"sha":"160b2f045e5b7a75d27e65268081a5be5b1590bf","url":"http://0.0.0.0:41459/api/v1/repos/admin/demo/git/trees/160b2f045e5b7a75d27e65268081a5be5b1590bf","tree":null,"truncated":false,"page":18405667,"total_count":2}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/git/trees/fc3aaa3861ba9956a8b17b02fb198b2c6fb2f9ed?page=18405667'

Undocumented status codeST103

Received: 403
Documented: 200, 400, 404
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H $'Sudo: (,\t|u:$b' -H 'Authorization;' 'http://0.0.0.0:41459/api/v1/repos/%C3%80/demo/git/trees/8b02ced4f9c1d04805687b7764de4f3d5358f3d0?page=-3242603'
POST/repos/{owner}/{repo}/issues/comments/{id}/assetsMissing test data
Server error+3 moreless
  • Server error on undeclared request Content-Type
  • Undocumented Content-Type
  • Undocumented status code
519

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' 'http://0.0.0.0:41459/api/v1/repos/0/0/issues/comments/-9223372036854775808/assets?name='

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data; boundary=a4a9bb9b788bf15e4ab2f34bd2fcdc00' -d $'--a4a9bb9b788bf15e4ab2f34bd2fcdc00\r\nContent-Disposition: form-data; name="attachment"; filename="attachment.png"\r\n\r\n�PNG\r\n\x1a\n\x00\x00\x00\rIHDR\x00\x00\x00\x01\x00\x00\x00\x01\x08\x00\x00\x00\x00:~�U\x00\x00\x00\nIDATx�c`\x00\x00\x00\x02\x00\x01H��q\x00\x00\x00\x00IEND�B`�\r\n--a4a9bb9b788bf15e4ab2f34bd2fcdc00--\r\n' http://0.0.0.0:41459/api/v1/repos/0/0/issues/comments/-9223372036854775809/assets

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 201, 400, 403, 404, 413, 422, 423
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data; boundary=65ede86b1ce64c6b7f4d2474530ba249' -d $'--65ede86b1ce64c6b7f4d2474530ba249\r\n-Infinity--65ede86b1ce64c6b7f4d2474530ba249--\r\n' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/comments/19/assets?name=demo'
POST/repos/{owner}/{repo}/issues/comments/{id}/reactionsMissing test data
Server error on undeclared request Content-Type+3 moreless
  • Schema-valid request rejected
  • Undocumented Content-Type
  • Undocumented status code
529

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"content": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/issues/comments/-9223372036854775808/reactions

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 200, 201, 403, 404
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/comments/1/reactions

Undocumented status codeST103

Received: 401
Documented: 200, 201, 403, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H $'Authorization: O\t*^' -H 'Content-Type: application/json' -d '{"\u0005\u00c2\u0096X\u00ed\ud8ff\ude0bK\u0082jz\u00bc\u007f\u00f8\udbe9\ude19\u00c6\u001b\udb9d\udd7a\udbde\udce8\u0018,\u0094\uda82\udc6d": 5.935904211714967e+16, "\u00fb\u001c": true, "content": "dHJlZSAyNzYyMzlhZjliZjJkYmU2ODg3ZDRkNjIwYWZjMmIwZTFkOTNhYjhjCnBhcmVudCAzMzYzYTAxN2FlOGUyZDY1ZDlkMTRjY2VhOTk0NTQyNTY5MDkyNGU0CmF1dGhvciBhZG1pbiA8YWRtaW5AZXhhbXBsZS5jb20+IDE3OTI0MTEyMDcgKzAwMDAKY29tbWl0dGVyIGFkbWluIDxhZG1pbkBleGFtcGxlLmNvbT4gMTc5MjQxMTIwNyArMDAwMAoKCg=="}' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/comments/1/reactions?sudo=%C3%A9D&access_token=%2F%F1%8C%AC%9C9%C2%BA'

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"": null}' http://0.0.0.0:41459/api/v1/repos/0/0/issues/comments/-9223372036854775809/reactions
POST/repos/{owner}/{repo}/issues/{index}/assignees
Server error on undeclared request Content-Type+3 moreless
  • Response violates schema
  • Schema-valid request rejected
  • Undocumented Content-Type
528

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"assignees": []}' http://0.0.0.0:41459/api/v1/repos/0/0/issues/-9223372036854775808/assignees

Response violates schemaST1087 violations

null is not of type "array"

Validated against the response schema for status code 201.

Schema at /definitions/Issue/properties/assignees:

    {
        "type": "array",
        "items": {
            "$ref": "#/components/schemas/User"
        },
        "x-go-name": "Assignees"
    }

Value:

    null
null is not of type "array"

Validated against the response schema for status code 201.

Schema at /definitions/Issue/properties/projects:

    {
        "type": "array",
        "items": {
            "$ref": "#/components/schemas/Project"
        },
        "x-go-name": "Projects"
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 201.

Schema at /definitions/Milestone:

    {
        "type": "object",
        "description": "Milestone milestone is a collection of issues on one repo...
        "properties": {
            "closed_at": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Closed"
            },
            "closed_issues": {
                "description": "ClosedIssues is the number of closed issues in th...
                "type": "integer",
                "format": "int64",
                "x-go-name": "ClosedIssues"
            },
            "created_at": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Created"
        // Output truncated...
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 201.

Schema at /definitions/PullRequestMeta:

    {
        "type": "object",
        "description": "PullRequestMeta PR info if an issue is a PR",
        "properties": {
            "draft": {
                "type": "boolean",
                "x-go-name": "IsWorkInProgress"
            },
            "html_url": {
                "type": "string",
                "x-go-name": "HTMLURL"
            },
            "merged": {
                "type": "boolean",
                "x-go-name": "HasMerged"
            },
            "merged_at": {
                "type": "string",
                "format": "date-time",
        // Output truncated...
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 201.

Schema at /definitions/User:

    {
        "type": "object",
        "description": "User represents a user",
        "properties": {
            "active": {
                "description": "Is user active",
                "type": "boolean",
                "x-go-name": "IsActive"
            },
            "avatar_url": {
                "description": "URL to the user's avatar",
                "type": "string",
                "x-go-name": "AvatarURL"
            },
            "created": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Created"
            },
        // Output truncated...
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 201.

Schema at /definitions/Issue/properties/closed_at:

    {
        "type": "string",
        "format": "date-time",
        "x-go-name": "Closed"
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 201.

Schema at /definitions/Issue/properties/due_date:

    {
        "type": "string",
        "format": "date-time",
        "x-go-name": "Deadline"
    }

Value:

    null
Response201 Created
{"id":1,"url":"http://localhost:3000/api/v1/repos/admin/demo/issues/1","html_url":"http://0.0.0.0:41459/admin/demo/issues/1","number":1,"user":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":true,"last_login":"1970-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricte // Output truncated...
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/assignees

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 1 additional property not defined in the schema (`򕸶‹`). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.
Response422 Unprocessable Content
{"message":"user does not exist [uid: 0, name: A򴂢€\u001c+]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\uda17\ude36\u000e\u008b": {}, "assignees": ["A\uda90\udca2\u0080\u001c+", "\u00a0\uda20\udf36\u00a0\ud950\udcb3P\u00c2\r\u00b0\u008dq]"]}' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/assignees

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"": {"": true, "\ud99f\udf2cO\u0091": true, "\u001f\u00d3D9\u0002\u00bc\u00f67r\u0000\uda25\udf4c\u00ec>\u009b\ud9e5\ude95": -4.268603715185845e-196}, "\ud8b8\ude11y\u00e7\u008b": -1.2077739601640813e+201, "\u00ef\udb1e\udc00\u008a": [], "assignees": ["y", "", "\uda3c\udfe6\u00b1^\u00e1gJ\u117d", "\u00cb\u00f9\uda7a\udc23\u00f0\ud965\ude64\u00ac/`U", "\u00ec"]}' http://0.0.0.0:41459/api/v1/repos/0/0/issues/-9223372036854775809/assignees
POST/repos/{owner}/{repo}/issues/{index}/labels
Server error on undeclared request Content-Type+3 moreless
  • Schema-valid request rejected
  • Undocumented Content-Type
  • Undocumented status code
548

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"labels": []}' http://0.0.0.0:41459/api/v1/repos/0/0/issues/-9223372036854775808/labels

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 4 additional properties not defined in the schema (`áv`, `񱶨Aå¾R9}`, `G𯑉–` and 1 more). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.

Undocumented status codeST103

Received: 400
Documented: 200, 403, 404
Response400 Bad Request
{"message":"a label must be an integer or a string","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\u00eaB\udbba\udd88": [], "\u0002\u00c3\u00a1v": [false, null, 3.510621848378884e+16], "G\ud87d\udc49\u0096": {"": -65535}, "\u0006\u001e\ud987\udda8\u0003A\u00e5\u00beR9}": {"\udbef\udd32": null}, "labels": [{"\u00df]\u00b86\udb12\udd90\u00df\ud8e2\ude6e5\u7fdf\u008e": {"\f\u0080\u00c7\uda8f\udc47\ud91a\udd33\f\udab2\udcfb\u00e8\u00fa\u00e50\udaa6\udd22\u00d9\u001b\u000f": {}, "\u00c1NI\u00aa\u00d1\udb35\udeb7\b\u00fc:\u0004\u00e3a": -81347129799328757501753556992, "\ud87d\udf52\uda73\udf81": false}, "\uda02\udf3a\\K\u00c1\u00a2R4": {"": -8.050799252990563e-114, "\u00dd\u00a2\udbf8\udccb\u000b\u0089\udbd0\udd68n": "9\u0095p\u009a\u0086"}, "": []}]}' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/labels

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 200, 403, 404
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/labels

Undocumented status codeST103

Received: 401
Documented: 200, 403, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization;' -H 'Sudo: <C>AH7kf-' -H 'X-GITEA-OTP;' 'http://0.0.0.0:41459/api/v1/repos/admin/%F2%BF%82%B5/issues/35245664756137/labels?token=nNmUoOJ6Y6N14y0utuU3rLUxJjMRkQyKiekJ8Yv1&sudo=%C3%A3%C3%92Hp%C2%BB%F0%97%BA%9FK&access_token='

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d $'\x00' http://0.0.0.0:41459/api/v1/repos/0/0/issues/false/labels
POST/repos/{owner}/{repo}/issues/{index}/pin
Server error+3 moreless
  • Server error on undeclared request Content-Type
  • Missing Content-Type header
  • Undocumented status code
317

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/repos/0/0/issues/-9223372036854775808/pin

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/pin

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 204, 403, 404
Response500 Internal Server Error
{"message":"constraint failed: UNIQUE constraint failed: issue_pin.repo_id, issue_pin.issue_id (2067)","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/pin
POST/repos/{owner}/{repo}/issues/{index}/timesMissing test data
Server error on undeclared request Content-Type+3 moreless
  • Schema-valid request rejected
  • Undocumented Content-Type
  • Undocumented status code
632

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"created": "2000-01-01T00:00:00Z", "time": 0, "user_name": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/issues/-9223372036854775808/times

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 200, 400, 403, 404
Response422 Unprocessable Content
{"message":"[Time]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"time": 0}' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/times

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d $'\x00' http://0.0.0.0:41459/api/v1/repos/0/0/issues/-9223372036854775809/times
GET/repos/{owner}/{repo}/milestones
API accepts requests without authentication+3 moreless
  • Response violates schema
  • Schema-violating request accepted
  • Undocumented status code
415

Response violates schemaST1082 violations

null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/Milestone/properties/closed_at:

    {
        "type": "string",
        "format": "date-time",
        "x-go-name": "Closed"
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/Milestone/properties/due_on:

    {
        "type": "string",
        "format": "date-time",
        "x-go-name": "Deadline"
    }

Value:

    null
Response200 OK
[{"id":35,"title":"","description":"","state":"open","open_issues":0,"closed_issues":0,"created_at":"2026-10-19T12:01:05Z","updated_at":"2026-10-19T12:01:05Z","closed_at":null,"due_on":null},{"id":2,"title":"","description":"","state":"open","open_issues":0,"closed_issues":0,"created_at":"2026-10-19T12:01:03Z","updated_at":"2026-10-19T12:01:03Z","closed_at":null,"due_on":null},{"id":3,"title":"","description":"","state":"open","open_issues":0,"closed_issues":0,"created_at":"2026-10-19T12:01:03Z","updated_at // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/milestones

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/milestones`
Response200 OK
[{"id":35,"title":"","description":"","state":"open","open_issues":0,"closed_issues":0,"created_at":"2026-10-19T12:01:05Z","updated_at":"2026-10-19T12:01:05Z","closed_at":null,"due_on":null},{"id":2,"title":"","description":"","state":"open","open_issues":0,"closed_issues":0,"created_at":"2026-10-19T12:01:03Z","updated_at":"2026-10-19T12:01:03Z","closed_at":null,"due_on":null},{"id":3,"title":"","description":"","state":"open","open_issues":0,"closed_issues":0,"created_at":"2026-10-19T12:01:03Z","updated_at // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/milestones

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `limit` in query - violates `type` at /properties/limit (was integer, became null)
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/milestones?limit=null&page=41734&name='

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization;' -H 'X-GITEA-OTP: A.]C'"'"'bxY7[' -H 'Sudo: kr' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/milestones?page=95435793&token=mpYCAsc2DCDBmuQnwIIBOysl5OYQzqYdN2sB9YVo&name=%C3%B1&sudo=%C3%A0%C2%A2%F2%9F%86%92%C3%A3%C2%89&state=%C2%BE%C2%B1%F0%9C%B1%A0%F3%BF%83%9F%C3%AD'
POST/repos/{owner}/{repo}/milestones
Server error on undeclared request Content-Type+3 moreless
  • Response violates schema
  • Schema-valid request rejected
  • Undocumented status code
544

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"description": "", "due_on": "2000-01-01T00:00:00Z", "state": "open", "title": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/milestones

Response violates schemaST1082 violations

null is not of type "string"

Validated against the response schema for status code 201.

Schema at /properties/closed_at:

    {
        "type": "string",
        "format": "date-time",
        "x-go-name": "Closed"
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 201.

Schema at /properties/due_on:

    {
        "type": "string",
        "format": "date-time",
        "x-go-name": "Deadline"
    }

Value:

    null
Response201 Created
{"id":2,"title":"","description":"","state":"open","open_issues":0,"closed_issues":0,"created_at":"2026-10-19T12:01:03Z","updated_at":"2026-10-19T12:01:03Z","closed_at":null,"due_on":null}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/repos/admin/demo/milestones

Undocumented status codeST103

Received: 422
Documented: 201, 404
Response422 Unprocessable Content
{"message":"[]: jsontext: invalid character '\\x00' at start of value","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d $'\x00' http://0.0.0.0:41459/api/v1/repos/admin/demo/milestones

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/milestones
GET/repos/{owner}/{repo}/pulls
API accepts requests without authentication+3 moreless
  • Schema-valid request rejected
  • Schema-violating request accepted
  • Undocumented status code
449

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/pulls`
Response200 OK
[]
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/pulls

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 400
Documented: 200, 404, 500
Response400 Bad Request
{"message":"user does not exist [uid: 0, name: ÿ]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/pulls?state=all&milestone=8589934591&base_branch=&page=170703889925888&labels=493&labels=-212&labels=-2030973&labels=-637359072559&sort=priority&limit=203508707548196&poster=%C3%BF'

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `milestone` in query - violates `type` at /properties/milestone (was integer, became null)
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/pulls?sort=recentupdate&base_branch=&milestone=null'
POST/repos/{owner}/{repo}/releases
Server error+3 moreless
  • Server error on undeclared request Content-Type
  • Schema-valid request rejected
  • Undocumented status code
570

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"body": "", "draft": false, "name": "", "prerelease": false, "tag_message": "", "tag_name": "", "target_commitish": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/releases

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[TagName]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"tag_name": ""}' http://0.0.0.0:41459/api/v1/repos/admin/demo/releases

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 201, 404, 409, 422
Response500 Internal Server Error
{"message":"release tag name is not valid [tag_name: \u0003򆄖åÌ񓳯k€_#ùÆv\u001b\u0001🂻񫯭 񽣑]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"]\u009e\u00c3\u0084": [], "name": "\udbc1\ude3a/K\udbbb\udc4bb\ud9e1\udd5ff\u0095\udb81\udd90\u0001\u0006\u00c7\u0015\u0082", "tag_name": "\u0003\ud9d8\udd16\u00e5\u00cc\ud90f\udcefk\u0080_#\u00f9\u00c6v\u001b\u0001\ud83c\udcbb\ud96e\udfed\u00a0\ud9b6\udcd1"}' http://0.0.0.0:41459/api/v1/repos/admin/demo/releases
POST/repos/{owner}/{repo}/releases/{id}/assets
Server error+3 moreless
  • Server error on undeclared request Content-Type
  • Undocumented Content-Type
  • Undocumented status code
559

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' 'http://0.0.0.0:41459/api/v1/repos/0/0/releases/-9223372036854775808/assets?name='

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 201, 400, 404, 413
Response500 Internal Server Error
{"message":"http: no such file","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data; boundary=c637e12e2b1a998d80d1b087531af51c' -d $'--c637e12e2b1a998d80d1b087531af51c--\r\n' http://0.0.0.0:41459/api/v1/repos/admin/demo/releases/1/assets

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data; boundary=c637e12e2b1a998d80d1b087531af51c' -d $'--c637e12e2b1a998d80d1b087531af51c--\r\n' http://0.0.0.0:41459/api/v1/repos/0/%E5%89%A2_pkf/releases/-9223372036854775809/assets
POST/repos/{owner}/{repo}/tagsMissing test data
Server error+3 moreless
  • Server error on undeclared request Content-Type
  • Schema-valid request rejected
  • Undocumented status code
545

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"message": "", "tag_name": "", "target": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/tags

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 200, 404, 405, 409, 422, 423
Response500 Internal Server Error
{"message":"release tag name is not valid [tag_name: -script.pyw]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"": {}, "\u00e6\ud8db\udd2bgf\ud9b1\udd80\u00df\u00a6\u00ca": [-1835362, null, 5.0982787212117656e+16], "\u00116\u00b4": [], "\u0010\u00d8\u0080\ud938\udfa4": {}, "\uda86\udf39\u00e6\u00f1r\u00cb": {}, "tag_name": "-script.pyw", "message": "null"}' http://0.0.0.0:41459/api/v1/repos/admin/demo/tags

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/tags
GET/user/actions/runs
Server error+3 moreless
  • Schema-valid request rejected
  • Schema-violating request accepted
  • Undocumented status code
479

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response400 Bad Request
{"message":"invalid status ","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/actions/runs?event=&branch=&status=&actor=&head_sha=&page=0&limit=0'

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
{"workflow_runs":[],"total_count":0}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/actions/runs?page=null&page=null'

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 200, 400, 404
Response500 Internal Server Error
{"message":"user does not exist [uid: 0, name: \u000fý%]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/actions/runs?actor=%0F%C3%BD%25'
POST/user/actions/variables/{variablename}
Server error on undeclared request Content-Type+3 moreless
  • Missing Content-Type header
  • Schema-valid request rejected
  • Undocumented status code
488

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 201, 400, 409
Response422 Unprocessable Content
{"message":"[Value]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"description": "", "value": ""}' http://0.0.0.0:41459/api/v1/user/actions/variables/0

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"description": "", "value": ""}' http://0.0.0.0:41459/api/v1/user/actions/variables/0

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 1 additional property not defined in the schema (`m$4Âæýx`). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.
Response400 Bad Request
{"message":"name must start with a letter or underscore and contain only letters, numbers, and underscores","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"m$4\u00c2\u00e6\u00fd\u001dx": null, "value": "\ud861\udd1e\u0010\u00ca\u00f9A"}' http://0.0.0.0:41459/api/v1/user/actions/variables/%C3%85%10

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response201 Created
<EMPTY>
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\u0014`W;\"\u009e\u0082\u00fe\u00c0M?\u009c\u009a": [[true, {"k\u00ed": false, "\u001f\ud976\udc81\u0004\ud829\ude57": true}, {"\u00bd\ud9a3\udf3a\u009d\u00b2\u0096\"\ud89c\udd37\u00e09\u0096\ud8a8\uddbc-\u00c9\ud8bb\udc266": true, "\u00f0\u000e?A\udb97\udec7\ud9b8\udc6b\u00fd\udbb2\udd8c_": null}], []], "": {}, "value": "\u0014EB\u00db$\u00c4c\udb2d\udc12", "description": "\u00dd\u00a8\u00fa"}' http://0.0.0.0:41459/api/v1/user/actions/variables/h
POST/user/repos
Server error+3 moreless
  • Server error on undeclared request Content-Type
  • Schema-valid request rejected
  • Undocumented status code
523

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[Name]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"auto_init": false, "default_branch": "", "description": "", "gitignores": "", "issue_labels": "", "license": "", "name": "", "object_format_name": "sha1", "private": false, "readme": "", "template": false, "trust_model": "default"}' http://0.0.0.0:41459/api/v1/user/repos

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"auto_init": false, "default_branch": "", "description": "", "gitignores": "", "issue_labels": "", "license": "", "name": "", "object_format_name": "sha1", "private": false, "readme": "", "template": false, "trust_model": "default"}' http://0.0.0.0:41459/api/v1/user/repos

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 1 additional property not defined in the schema (``). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.
Response400 Bad Request
{"message":"readme template does not exist, available templates: [Default]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"": [[-6.818387745222593e-295], {"\u00c6}\u00c5\u0084\u00b4\u0012\u00dd\u00b7Le\u00bf": -129707650, "\u00efY\u00d3\u00e1\udbe8\udf5f": -5.956980945545089e+16, "\u00ae\u0080\u00e0\u00e7\u00a8\u00ec\ud8ec\udc10\u00b8": false}, true], "object_format_name": "sha256", "readme": "\ud861\udf31O", "description": "\u00b4\u00bb/s", "issue_labels": "", "gitignores": "\"[\u001f\udb03\udd44\u007f}\u00d9\u00a1?\b", "trust_model": "committer", "template": true, "license": "\u00f5k", "auto_init": true, "default_branch": "", "name": "AGPL-3.0", "private": false}' http://0.0.0.0:41459/api/v1/user/repos

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 201, 400, 409, 422
Response500 Internal Server Error
{"message":"initRepository: prepareRepoCommit: GetRepoInitFile[k—­¦¿½]: file does not exist","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"template": false, "gitignores": "k\u0097\u00ad\u00a6\u00bf\u00bd", "description": "6n/", "default_branch": "\u009a", "license": "", "auto_init": true, "object_format_name": "sha1", "name": "attachment.gif", "private": true}' http://0.0.0.0:41459/api/v1/user/repos
GET/users/{username}/activities/feeds
API accepts requests without authentication+3 moreless
  • Response violates schema
  • Schema-violating request accepted
  • Undocumented Content-Type
646

Response violates schemaST1082 violations

"" is not a "email"

Validated against the response schema for status code 200.

Schema at /definitions/User/properties/email:

    {
        "format": "email",
        "type": "string",
        "x-go-name": "Email"
    }

Value:

    ""
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/Comment:

    {
        "type": "object",
        "description": "Comment represents a comment on a commit or issue",
        "properties": {
            "assets": {
                "description": "Attachments contains files attached to the comment",
                "type": "array",
                "items": {
                    "$ref": "#/components/schemas/Attachment"
                },
                "x-go-name": "Attachments"
            },
            "body": {
                "description": "Body contains the comment text content",
                "type": "string",
                "x-go-name": "Body"
            },
            "created_at": {
                "type": "string",
        // Output truncated...
    }

Value:

    null
Response200 OK
[{"id":148,"user_id":1,"op_type":"publish_release","act_user_id":1,"act_user":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":true,"last_login":"1970-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":true,"prohibit_login":false,"location":"o\u0015 // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/users/admin/activities/feeds

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /users/{username}/activities/feeds`
Response200 OK
[{"id":148,"user_id":1,"op_type":"publish_release","act_user_id":1,"act_user":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"1+admin@noreply.localhost","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":false,"prohibit_login":false,"location // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/users/admin/activities/feeds

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `date` in query - violates `format` at /properties/date
Response200 OK
[{"id":148,"user_id":1,"op_type":"publish_release","act_user_id":1,"act_user":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":true,"last_login":"1970-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":true,"prohibit_login":false,"location":"o\u0015 // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/users/admin/activities/feeds?date=%28i%C2%81'

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
  1. GET/user/emails
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/emails
  2. GET/users/0/activities/feedsfailed here
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/users/0/activities/feeds?limit=-2684&only-performed-by=false&date=1043-09-01'
GET/users/{username}/projects
API accepts requests without authentication+3 moreless
  • Schema-violating request accepted
  • Undocumented Content-Type
  • Undocumented status code
620

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /users/{username}/projects`
Response200 OK
[]
Reproduce
curl -X GET 'http://0.0.0.0:41459/api/v1/users/workbench-user/projects?state=open&page=0&limit=0'

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `state` in query - state: Incorrect type
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/users/workbench-user/projects?state=null&state=null'

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: RejectedPositiveData' 'http://0.0.0.0:41459/api/v1/users/admin/projects?limit=55599&token=gdt_D9OBLlvCu3V3p31uTnFn6KRHrh2E1vB5qjEi1wJKswb&access_token=k%F2%A2%B0%86%C2%B8&state=open&page=87908628837&sudo=%C2%80%F4%80%B0%B3%C3%9B%F3%A6%8F%B2%C2%9B'

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
  1. GET/user/emails
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/emails
  2. GET/users/0/projectsfailed here
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/users/0/projects
GET/users/{username}/repos
API accepts requests without authentication+3 moreless
  • Response violates schema
  • Schema-violating request accepted
  • Undocumented Content-Type
704

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /users/{username}/repos`
Response200 OK
[{"id":1,"owner":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":false,"prohibit_login":false,"location":"o\u0015$󆽳","website":"","description":"񶞪","visibility":"public","f // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/users/admin/repos

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - violates `type` at /properties/page (was integer, became array)
Response200 OK
[{"id":1,"owner":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":false,"prohibit_login":false,"location":"o\u0015$󆽳","website":"","description":"񶞪","visibility":"public","f // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/users/admin/repos?limit=3565&page=false&page=4.277211640784431e-119&page=-4.307300392649665e%2B16&page=%C2%99%26V&page=%F1%BE%92%9F%C2%9D%C3%A3&page=%18%F1%B3%85%81V%F2%97%B0%8FK%10&page=%C3%A2&page=false&page=%5B-1.7976931348623157e%2B308%2C+%27false%27%2C+%27h%5Cx13Z%5Cue6dfJ%5Cx97%5Cx82%27%5D&page=%5B%7B%7D%2C+%7B%27%5Cx1d%C3%A2%40%27%3A+%7B%27k%5CU000bb1da%C3%AD%27%3A+%27null%27%7D%2C+%27s%27%3A+99630189772876912%7D%2C+%7B%7D%5D&page=%7B%7D&page=true&page=%7B%27%F0%B0%96%BDH%C3%9D%C3%89%27%3A+787%2C+%27%5Cue2f1%C3%BCJ_%7CS%C3%98%27%3A+%5B%27null%27%2C+%27false%27%5D%7D&page=%7B%27%C2%B5%27%3A+%7B%27%27%3A+-7.087266167878773e%2B16%2C+%27%C3%88%C3%9Aw%5CU00052861%27%3A+%27%5CU000da031%5Cx82%C3%B8%3C%27%7D%2C+%27AllowHeaderMismatch%27%3A+-1.7889768100996632e%2B60%2C+%27%5B%C2%B9%C3%A7%5CU000407b3%27%3A+%7B%27%27%3A+1.895694698710572e%2B16%2C+%27%5Cx9ct%23%27%3A+-205918%7D%7D&page=%5B%27%C3%B5%C3%85vB%27%2C+1038%2C+%27%C2%A8%5Cx0b%C3%A2%5Cx1d%5Ct%2F%C2%BA%C3%B8%C3%98%C2%AE%5CU000a3987%C3%85f%3Cf%5CU00014908%5CU00042b9d%C3%A7%21%C3%99%5Cx14%5CU0004d1e5%5CU000f52d1%5CU000c3406U%5Ec%C3%9E%C3%B0%5C%5C%5CU0005e4bc%C2%B3%5Cx8c%C2%B8%60%C2%AB%27%5D&page=%5B%5B4251%2C+%27null%27%5D%2C+%5B488%5D%2C+%27%C2%BE%5CU0007743e%2B%5Cx08%27%5D&page=-11468&page=%7B%27%27%3A+2603%7D&page=%5B%7B%27%C3%91%27%3A+%27false%27%7D%2C+%7B%7D%2C+%7B%7D%5D&page=%5B%5B%5D%2C+%7B%7D%5D&page=%7B%7D&page=false&page=%7B%27%C3%B1%5CU000f1a37%C3%A9%F0%93%82%A3%3E%27%3A+%5B%27%C3%986%27%5D%7D&page=%7B%27G%C3%87%C3%AA%29%27%3A+%7B%27%3A%5CU000a7932N%5Cx06%5Cx94a%27%3A+%27false%27%2C+%27%5CU00068ae1%5Cx1c%5Cx01%5CU0004665fZG%27%3A+-86856343489020%7D%2C+%27%27%3A+%5B-5e-324%2C+5.203732986418635e%2B16%2C+-69913515%5D%7D&page=&page=%5B%27null%27%2C+%27null%27%5D&page=%7B%27%E7%B8%AA%C3%B5%5Cx93%5CU00098eb5N%5Cx85%5Cx9c%27%3A+%5B-14135%2C+%27null%27%2C+%27true%27%5D%2C+%27%5Cx04%C2%B6%225%C2%AF%5B%27%3A+%5B%27null%27%5D%7D&page=%5B%5D&page=%0E%C3%8C%C3%B8%04%C2%BA%C3%B3%11&page=%5B1.7091501584394276e%2B16%2C+%5B%5D%2C+%5B3%2C+%27null%27%2C+%27%27%5D%5D&page=%F3%AC%88%90%C3%88%14&page=&page=%10%F3%B1%B1%AC&page=%C3%A5%C3%8A%C3%8F&page=%C3%B99%C3%9C%F2%90%98%9F%C3%99&page=6.932525212685794e%2B16&page=-4.835238207493907e%2B16&page=%5B%5B%5D%5D&page=%5B-147405%2C+%27null%27%2C+-4.119543495357337e%2B16%5D&page=%5B%5B%5D%2C+%7B%7D%2C+%27true%27%5D&page=%7B%7D&page=%5B%5D&page=%5B%5B%5D%5D&page=%7B%27%C3%8A%27%3A+%27null%27%2C+%27Z%22%C3%B6%27%3A+%27true%27%7D&page=true&page=%7B%7D&page=%5B%5D&page=%5B%5D&page=%7B%7D&page=%5B-4.222707252797526e%2B16%2C+%27false%27%2C+-5857612263%5D&page=129817337&page=%7B%27%5Cx8d%5CU0001c4cf%C3%88%7C%5Cx1a%27%3A+%5B%27%5CU0010cef3%5CU0010e82a%C2%A1%ED%88%82Z%27%2C+%27false%27%5D%7D&page=%5B%7B%27%C2%A5%5CU000772ee%C3%AF%C2%BF%5CU00069a33%C3%AB%C3%B2%5Cn%27%3A+%5B%5D%2C+%27b%27%3A+%7B%27%C2%A7%5Cx0fB%C2%B3%27%3A+%27%C3%88%5Cx8e%C3%8E%F0%B0%95%BF%27%2C+%27%E1%B9%B0%CC%BA%CC%BA%CC%95o%CD%9E+%CC%B7i%CC%B2%CC%AC%CD%87%CC%AA%CD%99n%CC%9D%CC%97%CD%95v%CC%9F%CC%9C%CC%98%CC%A6%CD%9Fo%CC%B6%CC%99%CC%B0%CC%A0k%C3%A8%CD%9A%CC%AE%CC%BA%CC%AA%CC%B9%CC%B1%CC%A4+%CC%96t%CC%9D%CD%95%CC%B3%CC%A3%CC%BB%CC%AA%CD%9Eh%CC%BC%CD%93%CC%B2%CC%A6%CC%B3%CC%98%CC%B2e%CD%87%CC%A3%CC%B0%CC%A6%CC%AC%CD%8E+%CC%A2%CC%BC%CC%BB%CC%B1%CC%98h%CD%9A%CD%8E%CD%99%CC%9C%CC%A3%CC%B2%CD%85i%CC%A6%CC%B2%CC%A3%CC%B0%CC%A4v%CC%BB%CD%8De%CC%BA%CC%AD%CC%B3%CC%AA%CC%B0-m%CC%A2i%CD%85n%CC%96%CC%BA%CC%9E%CC%B2%CC%AF%CC%B0d%CC%B5%CC%BC%CC%9F%CD%99%CC%A9%CC%BC%CC%98%CC%B3+%CC%9E%CC%A5%CC%B1%CC%B3%CC%ADr%CC%9B%CC%97%CC%98e%CD%99p%CD%A0r%CC%BC%CC%9E%CC%BB%CC%AD%CC%97e%CC%BA%CC%A0%CC%A3%CD%9Fs%CC%98%CD%87%CC%B3%CD%8D%CC%9D%CD%89e%CD%89%CC%A5%CC%AF%CC%9E%CC%B2%CD%9A%CC%AC%CD%9C%C7%B9%CC%AC%CD%8E%CD%8E%CC%9F%CC%96%CD%87%CC%A4t%CD%8D%CC%AC%CC%A4%CD%93%CC%BC%CC%AD%CD%98%CD%85i%CC%AA%CC%B1n%CD%A0g%CC%B4%CD%89+%CD%8F%CD%89%CD%85c%CC%AC%CC%9Fh%CD%A1a%CC%AB%CC%BB%CC%AF%CD%98o%CC%AB%CC%9F%CC%96%CD%8D%CC%99%CC%9D%CD%89s%CC%97%CC%A6%CC%B2.%CC%A8%CC%B9%CD%88%CC%A3%27%3A+%27m%C2%A8%C3%96%C3%AC%C2%A6%C2%A5%C3%B9%C3%A9%27%2C+%27%29%23%5CU0005239f%5Cx15%C3%AB%5CU0005622d%27%3A+%27%5CU000708c8%5CU0010a229%5Cx8b%C3%A3R%5Cx1e%C2%B5%5CU000771ca%21%5CU0008e8d0%5CU0003de16%C3%B2e%C3%A7%5Cx079%27%7D%2C+%27De%5Cx7f%5CU00098ec5r%C3%87%C3%A3%3B%C3%B0%5CU000fb96f%C3%AF%27%3A+%7B%27%C3%B4%C3%AF%C3%9F%27%3A+%27%5Cue633%C3%A1%27%7D%7D%2C+%5B-448%5D%5D'

Response violates schemaST108

"" is not a "email"

Validated against the response schema for status code 200.

Schema at /definitions/User/properties/email:

    {
        "format": "email",
        "type": "string",
        "x-go-name": "Email"
    }

Value:

    ""
Response200 OK
[{"id":16,"owner":{"id":4,"login":"workbench-user","type":"Organization","login_name":"","source_id":0,"full_name":"ÿ\u001c‘","email":"","avatar_url":"http://0.0.0.0:41459/avatars/fa25ceee0d7be94b95c0208f7456232d4e85b901ba9bb49d8219ba29e2313dc7","html_url":"http://0.0.0.0:41459/workbench-user","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:59:28Z","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"€򰸁\u001d􊧿\\9¼ŸKêFI // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/users/workbench-user/repos?limit=-32589158477190044730'

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
  1. GET/user/emails
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/emails
  2. GET/users/0/reposfailed here
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/users/0/repos
POST/admin/hooks
Server error on undeclared request Content-Type+2 moreless
  • Schema-valid request rejected
  • Undocumented status code
558

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 201
Response422 Unprocessable Content
{"message":"Missing config option: url","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"active": false, "authorization_header": "", "branch_filter": "", "config": {}, "events": [], "name": "", "type": "dingtalk"}' http://0.0.0.0:41459/api/v1/admin/hooks

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"active": false, "authorization_header": "", "branch_filter": "", "config": {}, "events": [], "name": "", "type": "dingtalk"}' http://0.0.0.0:41459/api/v1/admin/hooks
POST/orgs/{org}/actions/runners/registration-token
Server error on undeclared request Content-Type+2 moreless
  • Undocumented Content-Type
  • Undocumented status code
282

Undocumented status codeST103

Received: 404
Documented: 200
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/0/actions/runners/registration-token

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/orgs/0/actions/runners/registration-token

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/0/actions/runners/registration-token
POST/orgs/{org}/projects
Server error on undeclared request Content-Type+2 moreless
  • Schema-valid request rejected
  • Undocumented Content-Type
242

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"card_type": "", "description": "", "template_type": "", "title": ""}' http://0.0.0.0:41459/api/v1/orgs/0/projects

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"invalid template_type \"J\\u0099\\U000f440e𫛖\\u0089Áç\\U00098b0e\\U000aba57ì\" (expected none, basic_kanban, bug_triage)","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"template_type": "J\u0099\udb91\udc0e\ud86d\uded6\u0089\u00c1\u00e7\uda22\udf0e\uda6e\ude57\u00ec", "card_type": "\u0010\ud825\udea9\u0083CF\ud988\udc2e\u00b3\u009e9\u00ead\u00fc~", "description": "", "title": "--workbench-output"}' http://0.0.0.0:41459/api/v1/orgs/workbench/projects

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"title": "First issue"}' http://0.0.0.0:41459/api/v1/orgs/0/projects
POST/orgs/{org}/projects/{id}/columnsMissing test data
Server error on undeclared request Content-Type+2 moreless
  • Schema-valid request rejected
  • Undocumented Content-Type
289

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"color": "", "title": ""}' http://0.0.0.0:41459/api/v1/orgs/0/projects/-9223372036854775808/columns

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"title": "First issue"}' http://0.0.0.0:41459/api/v1/orgs/workbench/projects/1/columns

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/projects/1/columns
POST/orgs/{org}/projects/{id}/columns/moveMissing test data
Server error on undeclared request Content-Type+2 moreless
  • Schema-valid request rejected
  • Undocumented Content-Type
296

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"column_ids": []}' http://0.0.0.0:41459/api/v1/orgs/0/projects/-9223372036854775808/columns/move

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"column_ids": []}' http://0.0.0.0:41459/api/v1/orgs/workbench/projects/1/columns/move

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/projects/1/columns/move
POST/orgs/{org}/projects/{id}/issues/{issue_id}/moveMissing test data
Server error on undeclared request Content-Type+2 moreless
  • Schema-valid request rejected
  • Undocumented Content-Type
299

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"column_id": 0, "sorting": 0}' http://0.0.0.0:41459/api/v1/orgs/0/projects/-9223372036854775808/issues/1/move

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"column_id": 0}' http://0.0.0.0:41459/api/v1/orgs/workbench/projects/1/issues/2/move

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[ColumnID]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"column_id": 0}' http://0.0.0.0:41459/api/v1/orgs/workbench/projects/1/issues/1/move
POST/repos/{owner}/{repo}/actions/workflows/{workflow_id}/dispatchesMissing test data
Server error on undeclared request Content-Type+2 moreless
  • Schema-valid request rejected
  • Undocumented Content-Type
319

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"inputs": {}, "ref": "refs/heads/main"}' 'http://0.0.0.0:41459/api/v1/repos/0/0/actions/workflows/0/dispatches?return_run_details=true&scoped_workflow_source_repo_id=-9223372036854775808'

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[Ref]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"ref": ""}' http://0.0.0.0:41459/api/v1/repos/admin/demo/actions/workflows/0/dispatches

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d $'\x00' http://0.0.0.0:41459/api/v1/repos/0/demo/actions/workflows/%C2%AC%3C/dispatches
POST/repos/{owner}/{repo}/avatarMissing test data
Server error on undeclared request Content-Type+2 moreless
  • Schema-valid request rejected
  • Undocumented status code
300

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"image": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/avatar

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 204, 404
Response422 Unprocessable Content
{"message":"[Image]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/repos/admin/demo/avatar

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 4 additional properties not defined in the schema (``, `÷񀱶9𶡐㫧‘򍷢ÄM`, `󈪵öß񂊁Ú` and 1 more). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.

Undocumented status codeST103

Received: 400
Documented: 204, 404
Response400 Bad Request
{"message":"illegal base64 data at input byte 0","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\udbe2\udf04(\udb45\udf9a\u00af\uda07\udf26\u00f6\u00ec\u00c6\u00fd\u0089=\u0094\u00b8\u001e\ud9b9\udf74\u0d38\u00d8\uda8a\udd7c\udb41\udff1\u007fL": [], "\udae2\udeb5\u00f6\u00df\ud8c8\ude81\u008d\u0014\u00da": {"=\u00c0\ud82b\udc3c-\ud967\udfe7i\u00ec\u0007 \ud8e7\udc05V\ud9c1\udf37\uda4c\uddd7\u00eaN \ud8dc\udfb2\u0016\u00e3{\u0006\ud993\udd10\udbf9\ude31": "\u0002\r(\udb9a\udf06\udab8\udeb5O\u00a1\u00cc\ud8f6\udc9eq\u001f\u00aaH\ud9d8\udd27\u0005u\u00a1\u00f1:?\ud829\udd67\u001d\udbac\udc49\udb35\ude47{X"}, "": [null], "\u00f7\ud8c3\udc769\ud89a\udc50\u3ae7\u0091\ud9f7\udde2\u007f\u00c4M": null, "image": "\u00edqJ\u0003C\ud9d3\udfcd1"}' http://0.0.0.0:41459/api/v1/repos/admin/demo/avatar
POST/repos/{owner}/{repo}/branch_protections/priority
Server error on undeclared request Content-Type+2 moreless
  • Missing Content-Type header
  • Schema-valid request rejected
306

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"ids": []}' http://0.0.0.0:41459/api/v1/repos/0/0/branch_protections/priority

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/repos/admin/demo/branch_protections/priority

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/branch_protections/priority
GET/repos/{owner}/{repo}/branches
API accepts requests without authentication+2 moreless
  • Response violates schema
  • Undocumented status code
407

Undocumented status codeST103

Received: 404
Documented: 200
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/0/0/branches?page=0&limit=0&q='

Response violates schemaST1084 violations

null is not of type "array"

Validated against the response schema for status code 200.

Schema at /definitions/PayloadCommit/properties/added:

    {
        "type": "array",
        "description": "List of files added in this commit",
        "items": {
            "type": "string"
        },
        "x-go-name": "Added"
    }

Value:

    null
null is not of type "array"

Validated against the response schema for status code 200.

Schema at /definitions/PayloadCommit/properties/modified:

    {
        "type": "array",
        "description": "List of files modified in this commit",
        "items": {
            "type": "string"
        },
        "x-go-name": "Modified"
    }

Value:

    null
null is not of type "array"

Validated against the response schema for status code 200.

Schema at /definitions/PayloadCommit/properties/removed:

    {
        "type": "array",
        "description": "List of files removed in this commit",
        "items": {
            "type": "string"
        },
        "x-go-name": "Removed"
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/PayloadUser:

    {
        "type": "object",
        "description": "PayloadUser represents the author or committer of a commit",
        "properties": {
            "email": {
                "type": "string",
                "format": "email",
                "x-go-name": "Email"
            },
            "name": {
                "description": "Full name of the commit author",
                "type": "string",
                "x-go-name": "Name"
            },
            "username": {
                "description": "username of the user",
                "type": "string",
                "x-go-name": "UserName"
            }
        // Output truncated...
    }

Value:

    null
Response200 OK
[{"name":"main","commit":{"id":"ba211db62679a70982d196bf27a09b9217d0d4c0","message":"\u0005\n","url":"http://localhost:3000/admin/demo/commit/ba211db62679a70982d196bf27a09b9217d0d4c0","author":{"name":"admin","email":"admin@example.com","username":"admin"},"committer":{"name":"admin","email":"admin@example.com","username":"admin"},"verification":{"verified":false,"reason":"gpg.error.not_signed_commit","signature":"","signer":null,"payload":""},"timestamp":"2026-10-19T12:00:13Z","added":null,"removed":null," // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/branches

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/branches`
Response200 OK
[{"name":"main","commit":{"id":"ba211db62679a70982d196bf27a09b9217d0d4c0","message":"\u0005\n","url":"http://localhost:3000/admin/demo/commit/ba211db62679a70982d196bf27a09b9217d0d4c0","author":{"name":"admin","email":"admin@example.com","username":"admin"},"committer":{"name":"admin","email":"admin@example.com","username":"admin"},"verification":{"verified":false,"reason":"gpg.error.not_signed_commit","signature":"","signer":null,"payload":""},"timestamp":"2026-10-19T12:00:13Z","added":null,"removed":null," // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/branches

Undocumented status codeST103

Received: 401
Documented: 200
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: s>&>,\' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/branches?page=-566392873063440357697519616&limit=11728&q=%02%28%C2%B9Yc%C2%B1%2CW&token=nNmUoOJ6Y6N14y0utuU3rLUxJjMRkQyKiekJ8Yv1'

Undocumented status codeST103

Received: 403
Documented: 200
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'Authorization: s>&>,\' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/branches?limit=-566392873063440357697519616&access_token=&page=0&sudo=%C3%BEH'
GET/repos/{owner}/{repo}/git/commits/{sha}
API accepts requests without authentication+2 moreless
  • Response violates schema
  • Schema-valid request rejected
360

Response violates schemaST108

null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/PayloadUser:

    {
        "type": "object",
        "description": "PayloadUser represents the author or committer of a commit",
        "properties": {
            "email": {
                "type": "string",
                "format": "email",
                "x-go-name": "Email"
            },
            "name": {
                "description": "Full name of the commit author",
                "type": "string",
                "x-go-name": "Name"
            },
            "username": {
                "description": "username of the user",
                "type": "string",
                "x-go-name": "UserName"
            }
        // Output truncated...
    }

Value:

    null
Response200 OK
{"url":"http://localhost:3000/api/v1/repos/admin/demo/git/commits/fc3aaa3861ba9956a8b17b02fb198b2c6fb2f9ed","sha":"fc3aaa3861ba9956a8b17b02fb198b2c6fb2f9ed","created":"2026-10-19T12:00:10Z","html_url":"http://localhost:3000/admin/demo/commit/fc3aaa3861ba9956a8b17b02fb198b2c6fb2f9ed","commit":{"url":"http://localhost:3000/api/v1/repos/admin/demo/git/commits/fc3aaa3861ba9956a8b17b02fb198b2c6fb2f9ed","author":{"name":"admin","email":"admin@example.com","date":"2026-10-19T12:00:10Z"},"committer":{"name":"admin" // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/git/commits/fc3aaa3861ba9956a8b17b02fb198b2c6fb2f9ed

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/git/commits/{sha}`
Response200 OK
{"url":"http://localhost:3000/api/v1/repos/admin/demo/git/commits/fc3aaa3861ba9956a8b17b02fb198b2c6fb2f9ed","sha":"fc3aaa3861ba9956a8b17b02fb198b2c6fb2f9ed","created":"2026-10-19T12:00:10Z","html_url":"http://localhost:3000/admin/demo/commit/fc3aaa3861ba9956a8b17b02fb198b2c6fb2f9ed","commit":{"url":"http://localhost:3000/api/v1/repos/admin/demo/git/commits/fc3aaa3861ba9956a8b17b02fb198b2c6fb2f9ed","author":{"name":"admin","email":"admin@example.com","date":"2026-10-19T12:00:10Z"},"committer":{"name":"admin" // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/git/commits/fc3aaa3861ba9956a8b17b02fb198b2c6fb2f9ed

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"no valid ref or sha: 𤵙¦h@\u00162򪣡\u000f;","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/git/commits/%F0%A4%B5%99%C2%A6h%40%162%F2%AA%A3%A1%0F%3B?stat=true&verification=false&files=true'

Response violates schemaST108

null is not of type "array"

Validated against the response schema for status code 200.

Schema at /definitions/Commit/properties/files:

    {
        "type": "array",
        "description": "Files contains information about files affected by the co...
        "items": {
            "$ref": "#/components/schemas/CommitAffectedFiles"
        },
        "x-go-name": "Files"
    }

Value:

    null
Response200 OK
{"url":"http://localhost:3000/api/v1/repos/admin/demo/git/commits/224be8d87218163ab6c94369af6b9b18e1a7f63a","sha":"224be8d87218163ab6c94369af6b9b18e1a7f63a","created":"2026-10-19T12:00:09Z","html_url":"http://localhost:3000/admin/demo/commit/224be8d87218163ab6c94369af6b9b18e1a7f63a","commit":{"url":"http://localhost:3000/api/v1/repos/admin/demo/git/commits/224be8d87218163ab6c94369af6b9b18e1a7f63a","author":{"name":"admin","email":"admin@example.com","date":"2026-10-19T12:00:09Z"},"committer":{"name":"admin" // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/git/commits/224be8d87218163ab6c94369af6b9b18e1a7f63a?files=false&stat=true&verification=true'

Response violates schemaST108

null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/CommitStats:

    {
        "type": "object",
        "description": "CommitStats is statistics for a RepoCommit",
        "properties": {
            "additions": {
                "description": "Additions is the number of lines added",
                "type": "integer",
                "format": "int64",
                "x-go-name": "Additions"
            },
            "deletions": {
                "description": "Deletions is the number of lines deleted",
                "type": "integer",
                "format": "int64",
                "x-go-name": "Deletions"
            },
            "total": {
                "description": "Total is the total number of lines changed",
                "type": "integer",
        // Output truncated...
    }

Value:

    null
Response200 OK
{"url":"http://localhost:3000/api/v1/repos/admin/demo/git/commits/29aedd0d7588d49531b59a3680edb35ad36670c0","sha":"29aedd0d7588d49531b59a3680edb35ad36670c0","created":"2026-10-19T12:00:13Z","html_url":"http://localhost:3000/admin/demo/commit/29aedd0d7588d49531b59a3680edb35ad36670c0","commit":{"url":"http://localhost:3000/api/v1/repos/admin/demo/git/commits/29aedd0d7588d49531b59a3680edb35ad36670c0","author":{"name":"admin","email":"admin@example.com","date":"2026-10-19T12:00:13Z"},"committer":{"name":"admin" // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/git/commits/29aedd0d7588d49531b59a3680edb35ad36670c0?verification=true&files=true&stat=false'

Response violates schemaST108

null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/PayloadCommitVerification:

    {
        "type": "object",
        "description": "PayloadCommitVerification represents the GPG verification...
        "properties": {
            "payload": {
                "description": "The signed payload content",
                "type": "string",
                "x-go-name": "Payload"
            },
            "reason": {
                "description": "The reason for the verification status",
                "type": "string",
                "x-go-name": "Reason"
            },
            "signature": {
                "description": "The GPG signature of the commit",
                "type": "string",
                "x-go-name": "Signature"
            },
        // Output truncated...
    }

Value:

    null
Response200 OK
{"url":"http://localhost:3000/api/v1/repos/admin/demo/git/commits/3363a017ae8e2d65d9d14ccea9945425690924e4","sha":"3363a017ae8e2d65d9d14ccea9945425690924e4","created":"2026-10-19T12:00:07Z","html_url":"http://localhost:3000/admin/demo/commit/3363a017ae8e2d65d9d14ccea9945425690924e4","commit":{"url":"http://localhost:3000/api/v1/repos/admin/demo/git/commits/3363a017ae8e2d65d9d14ccea9945425690924e4","author":{"name":"admin","email":"admin@example.com","date":"2026-10-19T12:00:07Z"},"committer":{"name":"admin" // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/git/commits/3363a017ae8e2d65d9d14ccea9945425690924e4?stat=true&verification=false&files=false'
POST/repos/{owner}/{repo}/hooksMissing test data
Server error on undeclared request Content-Type+2 moreless
  • Schema-valid request rejected
  • Undocumented status code
560

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"active": false, "authorization_header": "", "branch_filter": "", "config": {}, "events": [], "name": "", "type": "dingtalk"}' http://0.0.0.0:41459/api/v1/repos/0/0/hooks

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 201, 404
Response422 Unprocessable Content
{"message":"Missing config option: url","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"config": {}, "type": "gogs"}' http://0.0.0.0:41459/api/v1/repos/admin/demo/hooks
GET/repos/{owner}/{repo}/issue_templates
API accepts requests without authentication+2 moreless
  • Response violates schema
  • Undocumented status code
372

Response violates schemaST108

null is not of type "array"

Validated against the response schema for status code 200.

Schema:

    {
        "type": "array",
        "items": {
            "$ref": "#/components/schemas/IssueTemplate"
        },
        "components": {
            "schemas": {
                "IssueTemplateStringSlice": {
                    "type": "array",
                    "items": {
                        "type": "string"
                    },
                    "x-go-package": "gitea.dev/modules/structs"
                },
                "IssueFormField": {
                    "description": "IssueFormField represents a form field",
                    "type": "object",
                    "properties": {
                        "attributes": {
        // Output truncated...
    }

Value:

    null
Response200 OK
null
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/issue_templates

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/issue_templates`
Response200 OK
null
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/issue_templates

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: tceM=x3' -H 'Sudo: w\C7`/m*R])rAwRZ' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/issue_templates?token=nP5oOIizwitdNWl1l6vgERHal1cgaEDSjxyogWVn'

Undocumented status codeST103

Received: 403
Documented: 200, 404
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'Authorization: tceM=x3' -H 'Sudo: w\C7`/m*R])rAwRZ' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/issue_templates?access_token='
POST/repos/{owner}/{repo}/issues
Server error on undeclared request Content-Type+2 moreless
  • Response violates schema
  • Schema-valid request rejected
543

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"assignee": "", "assignees": [], "body": "", "closed": false, "due_date": "2000-01-01T00:00:00Z", "labels": [], "milestone": 0, "projects": [], "ref": "", "title": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/issues

Response violates schemaST1087 violations

null is not of type "array"

Validated against the response schema for status code 201.

Schema at /definitions/Issue/properties/assignees:

    {
        "type": "array",
        "items": {
            "$ref": "#/components/schemas/User"
        },
        "x-go-name": "Assignees"
    }

Value:

    null
null is not of type "array"

Validated against the response schema for status code 201.

Schema at /definitions/Issue/properties/projects:

    {
        "type": "array",
        "items": {
            "$ref": "#/components/schemas/Project"
        },
        "x-go-name": "Projects"
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 201.

Schema at /definitions/Milestone:

    {
        "type": "object",
        "description": "Milestone milestone is a collection of issues on one repo...
        "properties": {
            "closed_at": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Closed"
            },
            "closed_issues": {
                "description": "ClosedIssues is the number of closed issues in th...
                "type": "integer",
                "format": "int64",
                "x-go-name": "ClosedIssues"
            },
            "created_at": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Created"
        // Output truncated...
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 201.

Schema at /definitions/PullRequestMeta:

    {
        "type": "object",
        "description": "PullRequestMeta PR info if an issue is a PR",
        "properties": {
            "draft": {
                "type": "boolean",
                "x-go-name": "IsWorkInProgress"
            },
            "html_url": {
                "type": "string",
                "x-go-name": "HTMLURL"
            },
            "merged": {
                "type": "boolean",
                "x-go-name": "HasMerged"
            },
            "merged_at": {
                "type": "string",
                "format": "date-time",
        // Output truncated...
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 201.

Schema at /definitions/User:

    {
        "type": "object",
        "description": "User represents a user",
        "properties": {
            "active": {
                "description": "Is user active",
                "type": "boolean",
                "x-go-name": "IsActive"
            },
            "avatar_url": {
                "description": "URL to the user's avatar",
                "type": "string",
                "x-go-name": "AvatarURL"
            },
            "created": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Created"
            },
        // Output truncated...
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 201.

Schema at /definitions/Issue/properties/closed_at:

    {
        "type": "string",
        "format": "date-time",
        "x-go-name": "Closed"
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 201.

Schema at /definitions/Issue/properties/due_date:

    {
        "type": "string",
        "format": "date-time",
        "x-go-name": "Deadline"
    }

Value:

    null
Response201 Created
{"id":2,"url":"http://localhost:3000/api/v1/repos/admin/demo/issues/2","html_url":"http://0.0.0.0:41459/admin/demo/issues/2","number":2,"user":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":true,"last_login":"1970-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricte // Output truncated...
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"title": "First issue"}' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"Assignee does not exist: [name: user does not exist [uid: 0, name: y񘕲nK.d\\ñ¹å¡]]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"due_date": "2026-10-19T11:59:42Z", "labels": [], "title": "First issue", "body": "Copyright (c) <year> <owner>. \n\nRedistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:\n\n1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.\n\n2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.\n\n3. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n", "assignees": ["\u0084|\ud8a9\ude68\u0017\u0084.\ud93f\udfbc"], "closed": true, "assignee": "y\ud921\udd72nK.d\\\u00f1\u00b9\u00e5\u00a1", "projects": [68719476736, 1608616, -3057965, 68719476736]}' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues
GET/repos/{owner}/{repo}/issues/{index}
API accepts requests without authentication+2 moreless
  • Response violates schema
  • Undocumented status code
395

Response violates schemaST1087 violations

null is not of type "array"

Validated against the response schema for status code 200.

Schema at /definitions/Issue/properties/assignees:

    {
        "type": "array",
        "items": {
            "$ref": "#/components/schemas/User"
        },
        "x-go-name": "Assignees"
    }

Value:

    null
null is not of type "array"

Validated against the response schema for status code 200.

Schema at /definitions/Issue/properties/projects:

    {
        "type": "array",
        "items": {
            "$ref": "#/components/schemas/Project"
        },
        "x-go-name": "Projects"
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/Milestone:

    {
        "type": "object",
        "description": "Milestone milestone is a collection of issues on one repo...
        "properties": {
            "closed_at": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Closed"
            },
            "closed_issues": {
                "description": "ClosedIssues is the number of closed issues in th...
                "type": "integer",
                "format": "int64",
                "x-go-name": "ClosedIssues"
            },
            "created_at": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Created"
        // Output truncated...
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/PullRequestMeta:

    {
        "type": "object",
        "description": "PullRequestMeta PR info if an issue is a PR",
        "properties": {
            "draft": {
                "type": "boolean",
                "x-go-name": "IsWorkInProgress"
            },
            "html_url": {
                "type": "string",
                "x-go-name": "HTMLURL"
            },
            "merged": {
                "type": "boolean",
                "x-go-name": "HasMerged"
            },
            "merged_at": {
                "type": "string",
                "format": "date-time",
        // Output truncated...
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/User:

    {
        "type": "object",
        "description": "User represents a user",
        "properties": {
            "active": {
                "description": "Is user active",
                "type": "boolean",
                "x-go-name": "IsActive"
            },
            "avatar_url": {
                "description": "URL to the user's avatar",
                "type": "string",
                "x-go-name": "AvatarURL"
            },
            "created": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Created"
            },
        // Output truncated...
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/Issue/properties/closed_at:

    {
        "type": "string",
        "format": "date-time",
        "x-go-name": "Closed"
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/Issue/properties/due_date:

    {
        "type": "string",
        "format": "date-time",
        "x-go-name": "Deadline"
    }

Value:

    null
Response200 OK
{"id":1,"url":"http://localhost:3000/api/v1/repos/admin/demo/issues/1","html_url":"http://0.0.0.0:41459/admin/demo/issues/1","number":1,"user":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":true,"last_login":"1970-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricte // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/issues/{index}`
Response200 OK
{"id":1,"url":"http://localhost:3000/api/v1/repos/admin/demo/issues/1","html_url":"http://0.0.0.0:41459/admin/demo/issues/1","number":1,"user":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"1+admin@noreply.localhost","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z"," // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H $'Authorization: fT9!\t6D/[x' -H 'X-GITEA-OTP: ]Nbea' -H 'Sudo: <zJ' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/11614588233187?access_token=&sudo=Fr&token=nNmUoOJ6Y6N14y0utuU3rLUxJjMRkQyKiekJ8Yv1'

Undocumented status codeST103

Received: 403
Documented: 200, 404
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'Sudo: <zJ' -H $'Authorization: fT9!\t6D/[x' -H 'X-GITEA-OTP;' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/11614588233187
POST/repos/{owner}/{repo}/issues/{index}/blocksMissing test data
Server error on undeclared request Content-Type+2 moreless
  • Schema-valid request rejected
  • Undocumented status code
591

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"index": 0, "owner": "", "repo": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/issues/0/blocks

Undocumented status codeST103

Received: 422
Documented: 201, 404
Response422 Unprocessable Content
{"message":"[]: jsontext: invalid character '\\x00' at start of value","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d $'\x00' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/0/blocks

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/%C3%92%0D%08%F1%B8%80%B5%F1%93%95%84/blocks

Undocumented status codeST103

Received: 401
Documented: 201, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: f' -H 'Content-Type: application/json' -d '{"\udb1b\udea1\u0096\u00b9\ud9c8\udc35\u00d7\u00d3\u00b5\u00dc\u0083\ud865\udd95\u00e48B\u008a\u00c3'"'"'U\u0001": [], "\ud97a\uddb0\u00ce+\u007f\uda8e\ude7f\ud9aa\udf63": {"5\u00fa\n\r\u00b7\ud821\udf8c\u00a9\u00ed\rm\u179a<\u00d5\u0080\u001f\u00e5ENy\udba8\udf0a": false, "\u00d1\u007f\ud871\udd54": "\u0081J\udbe6\udca5\u0096S\u00b7\u00fd\udb22\udccc+\u00a4", "": true}, "\u00d3\u00dbVz\ud8b4\udfa2": {"\\\u00e5\u0089\u00e7\u00f3\u00e1\u00c6": {}, "\ud80d\ude81\u1552Pd": {}, "r<\ud9c4\ude706": {}}, "W\u0006": {"\u00d6": {"": {"\u001eRx": -15558}, "\udb1a\ude95<\ud860\udc96": [-1267456], "\u001c\u00b5B\u00a9Ii\u00bc\ud922\ude59": []}, "\u00e6R\u00ad": {}, "": {}}, "": [[69], {"\udab4\udd53\ud9cd\udeae}5!": -1.5147304914577152e+16, "": 4.1003336880039544e+16, "\uda97\udf96\u00e7/\udaef\udeb9\u00c4": 7.547738053560358e+74}], "repo": "\u00a1\u0002|<&\ud9af\uded8\u00ec", "index": 37523742316175, "owner": "admin"}' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/%E9%B0%A1Z%F2%9A%85%9Bs%5BS%C3%B5/blocks?token=HjPM8Iu3hHQdNPrVP9xvgDQtYu8hEmXKCSsajlvq&access_token=%C2%AD%C3%B1E%F0%A1%88%99%C2%A4&sudo=%C2%82%F1%86%8B%A0'
GET/repos/{owner}/{repo}/issues/{index}/comments
API accepts requests without authentication+2 moreless
  • Server error
  • Undocumented status code
411

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/issues/{index}/comments`
Response200 OK
[{"id":1,"html_url":"http://0.0.0.0:41459/admin/demo/issues/1#issuecomment-1","pull_request_url":"","issue_url":"http://0.0.0.0:41459/admin/demo/issues/1","user":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"1+admin@noreply.localhost","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026 // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/comments

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 200, 404
Response500 Internal Server Error
{"message":"issue does not exist [id: 0, repo_id: 1, index: 7742]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/7742/comments?before=2026-10-19T11%3A59%3A42Z&since=1970-01-01T00%3A00%3A00Z'
POST/repos/{owner}/{repo}/issues/{index}/deadline
Server error on undeclared request Content-Type+2 moreless
  • Schema-valid request rejected
  • Undocumented status code
266

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"due_date": "2000-01-01T00:00:00Z"}' http://0.0.0.0:41459/api/v1/repos/0/0/issues/-9223372036854775808/deadline

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 201, 403, 404
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/deadline
POST/repos/{owner}/{repo}/issues/{index}/dependenciesMissing test data
Server error on undeclared request Content-Type+2 moreless
  • Schema-valid request rejected
  • Undocumented status code
547

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"index": 0, "owner": "", "repo": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/issues/0/dependencies

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 201, 404, 423
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/%11%C2%A1%C2%A1%06wQ%C2%81%C3%A6%C3%BD/dependencies
PATCH/repos/{owner}/{repo}/issues/{index}/pin/{position}
Server error+2 moreless
  • Missing Content-Type header
  • Undocumented status code
320

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/pin/1

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 204, 403, 404
Response500 Internal Server Error
{"message":"The Position can't be lower than 1","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/pin/-9223372036854775808
POST/repos/{owner}/{repo}/issues/{index}/reactionsMissing test data
Server error on undeclared request Content-Type+2 moreless
  • Schema-valid request rejected
  • Undocumented status code
562

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"content": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/issues/-9223372036854775808/reactions

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 200, 201, 403, 404
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/18663/reactions
GET/repos/{owner}/{repo}/issues/{index}/timeline
API accepts requests without authentication+2 moreless
  • Response violates schema
  • Undocumented status code
447

Response violates schemaST1087 violations

null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/Comment:

    {
        "type": "object",
        "description": "Comment represents a comment on a commit or issue",
        "properties": {
            "assets": {
                "description": "Attachments contains files attached to the comment",
                "type": "array",
                "items": {
                    "$ref": "#/components/schemas/Attachment"
                },
                "x-go-name": "Attachments"
            },
            "body": {
                "description": "Body contains the comment text content",
                "type": "string",
                "x-go-name": "Body"
            },
            "created_at": {
                "type": "string",
        // Output truncated...
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/Issue:

    {
        "type": "object",
        "description": "Issue represents an issue in a repository",
        "properties": {
            "assets": {
                "type": "array",
                "items": {
                    "$ref": "#/components/schemas/Attachment"
                },
                "x-go-name": "Attachments"
            },
            "assignee": {
                "$ref": "#/components/schemas/User"
            },
            "assignees": {
                "type": "array",
                "items": {
                    "$ref": "#/components/schemas/User"
                },
        // Output truncated...
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/Label:

    {
        "type": "object",
        "description": "Label a label to an issue or a pr",
        "properties": {
            "color": {
                "type": "string",
                "x-go-name": "Color",
                "example": "00aabb"
            },
            "description": {
                "description": "Description provides additional context about the...
                "type": "string",
                "x-go-name": "Description"
            },
            "exclusive": {
                "type": "boolean",
                "x-go-name": "Exclusive",
                "example": false
            },
        // Output truncated...
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/Milestone:

    {
        "type": "object",
        "description": "Milestone milestone is a collection of issues on one repo...
        "properties": {
            "closed_at": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Closed"
            },
            "closed_issues": {
                "description": "ClosedIssues is the number of closed issues in th...
                "type": "integer",
                "format": "int64",
                "x-go-name": "ClosedIssues"
            },
            "created_at": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Created"
        // Output truncated...
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/Team:

    {
        "type": "object",
        "description": "Team represents a team in an organization",
        "properties": {
            "can_create_org_repo": {
                "description": "Whether the team can create repositories in the o...
                "type": "boolean",
                "x-go-name": "CanCreateOrgRepo"
            },
            "description": {
                "description": "The description of the team",
                "type": "string",
                "x-go-name": "Description"
            },
            "id": {
                "description": "The unique identifier of the team",
                "type": "integer",
                "format": "int64",
                "x-go-name": "ID"
        // Output truncated...
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/TrackedTime:

    {
        "type": "object",
        "description": "TrackedTime worked time for an issue / pr",
        "properties": {
            "created": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Created"
            },
            "id": {
                "description": "ID is the unique identifier for the tracked time ...
                "type": "integer",
                "format": "int64",
                "x-go-name": "ID"
            },
            "issue": {
                "$ref": "#/components/schemas/Issue"
            },
            "issue_id": {
        // Output truncated...
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/User:

    {
        "type": "object",
        "description": "User represents a user",
        "properties": {
            "active": {
                "description": "Is user active",
                "type": "boolean",
                "x-go-name": "IsActive"
            },
            "avatar_url": {
                "description": "URL to the user's avatar",
                "type": "string",
                "x-go-name": "AvatarURL"
            },
            "created": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Created"
            },
        // Output truncated...
    }

Value:

    null
Response200 OK
[{"id":1,"type":"comment","html_url":"http://0.0.0.0:41459/admin/demo/issues/1#issuecomment-1","pull_request_url":"","issue_url":"http://0.0.0.0:41459/admin/demo/issues/1","user":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"1+admin@noreply.localhost","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/timeline

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/issues/{index}/timeline`
Response200 OK
[{"id":1,"type":"comment","html_url":"http://0.0.0.0:41459/admin/demo/issues/1#issuecomment-1","pull_request_url":"","issue_url":"http://0.0.0.0:41459/admin/demo/issues/1","user":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"1+admin@noreply.localhost","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/timeline

Response violates schemaST108

null is not of type "array"

Validated against the response schema for status code 200.

Schema:

    {
        "type": "array",
        "items": {
            "$ref": "#/components/schemas/TimelineComment"
        },
        "components": {
            "schemas": {
                "User": {
                    "description": "User represents a user",
                    "type": "object",
                    "properties": {
                        "active": {
                            "description": "Is user active",
                            "type": "boolean",
                            "x-go-name": "IsActive"
                        },
                        "avatar_url": {
                            "description": "URL to the user's avatar",
                            "type": "string",
        // Output truncated...
    }

Value:

    null
Response200 OK
null
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/timeline?page=1224650273396000817152&limit=-4023503535742&before=2026-10-19T12%3A00%3A12Z&since=2026-10-19T12%3A01%3A08Z'

Undocumented status codeST103

Received: 422
Documented: 200, 404
Response422 Unprocessable Content
{"message":"parsing time \"\\x1c\\xc3\\xba\\xf0\\xac\\x88\\x94\\xf2\\x86\\xa3\\x8b\\xc3\\xac\\x19\" as \"2006-01-02T15:04:05Z07:00\": cannot parse \"\\x1c\\xc3\\xba\\xf0\\xac\\x88\\x94\\xf2\\x86\\xa3\\x8b\\xc3\\xac\\x19\" as \"2006\"","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/timeline?limit=232860531892751616&before=%1C%C3%BA%F0%AC%88%94%F2%86%A3%8B%C3%AC%19'

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'X-GITEA-OTP: aqcl' -H 'Authorization: `&zF' 'http://0.0.0.0:41459/api/v1/repos/%26%C3%86/demo/issues/1/timeline?token=gdt_XBh3cShtrb7CLSDZD6vE0v7kxiEUeqWktYMtAFxTbCP'
POST/repos/{owner}/{repo}/mirror-syncMissing test data
Server error on undeclared request Content-Type+2 moreless
  • Schema-valid request rejected
  • Undocumented status code
303

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/repos/0/0/mirror-sync

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 400
Documented: 200, 403, 404
Response400 Bad Request
{"message":"Repository is not a mirror","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/mirror-sync
POST/repos/{owner}/{repo}/projects/{id}/columnsMissing test data
Server error on undeclared request Content-Type+2 moreless
  • Schema-valid request rejected
  • Undocumented Content-Type
506

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"color": "", "title": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/projects/-9223372036854775808/columns

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 5 additional properties not defined in the schema (`a
b
c…def
g
h
i`, `¥`, `¾Ï=ž` and 2 more). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.
Response422 Unprocessable Content
{"message":"[Title]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\u00d1\u00e6\u0094q": [], "\u00f3\u0094\udbce\udc87\u0081\u0010\udbdc\udf32": "", "\u00be\u00cf=\u009e\u0011": {}, "\u00a5": {}, "a\nb\rc\u0085d\u000be\ff\u2028g\u2029h\r\ni": {"\u0097\u00f9h": [], "\uda80\udf8a\ud96a\udd40'"'"'\u00b2\u00ad\u00fa": {"": true, "\u00a9\u0080\u00ec\u00bbZ\udadc\udf81xw": -10070501377983786, "l": -34359738367}}, "title": "", "color": "00aabb"}' http://0.0.0.0:41459/api/v1/repos/admin/demo/projects/1/columns

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"title": "First issue"}' http://0.0.0.0:41459/api/v1/repos/0/0/projects/0.9238446672102537/columns
POST/repos/{owner}/{repo}/projects/{id}/columns/moveMissing test data
Server error on undeclared request Content-Type+2 moreless
  • Schema-valid request rejected
  • Undocumented Content-Type
298

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"column_ids": []}' http://0.0.0.0:41459/api/v1/repos/0/0/projects/-9223372036854775808/columns/move

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"column_ids must list every column of the project exactly once","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"column_ids": [-1749650781060231, 274877906943]}' http://0.0.0.0:41459/api/v1/repos/admin/demo/projects/113/columns/move

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"column_ids": []}' http://0.0.0.0:41459/api/v1/repos/0/demo/projects/47/columns/move
POST/repos/{owner}/{repo}/pulls/{index}/comments/{id}/repliesMissing test data
Server error on undeclared request Content-Type+2 moreless
  • Schema-valid request rejected
  • Undocumented Content-Type
516

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"body": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/-9223372036854775808/comments/-9223372036854775808/replies

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[Body]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/repos/admin/demo/pulls/1/comments/1/replies

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/repos/0/demo/pulls/1/comments/1/replies
POST/repos/{owner}/{repo}/pulls/{index}/mergeMissing test data
Server error on undeclared request Content-Type+2 moreless
  • Schema-valid request rejected
  • Undocumented status code
329

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"delete_branch_after_merge": false, "do": "merge", "force_merge": false, "head_commit_id": "", "merge_commit_id": "", "merge_message_field": "", "merge_title_field": "", "merge_when_checks_succeed": false}' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/-9223372036854775808/merge

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 200, 403, 404, 405, 409, 423
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/pulls/1/merge
POST/repos/{owner}/{repo}/pulls/{index}/reviews/{id}/dismissalsMissing test data
Server error on undeclared request Content-Type+2 moreless
  • Undocumented Content-Type
  • Undocumented status code
522

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"message": "", "priors": false}' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/-9223372036854775808/reviews/-9223372036854775808/dismissals

Undocumented status codeST103

Received: 401
Documented: 200, 403, 404, 422
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: UndefinedContentType' -H 'Content-Type: application/json' -d '{"\u009d": -14712, "": [8386060415862783.0], "\u00cb\u00d7": {}, "\u001e\udb59\udd0ei\u0019": [{"Pk\u00db\u0015\u00d6^.": true}, [1620211991207017379409166336]], "\t2He": {"XE\u0011\u008c^\u00a5\u8906&\u00b4-H": 1254772595945, "\u00b8\udb80\udca7": [-7.377435478318904e-272, true, -192], "999999999999999999999999999999": false}, "priors": false, "message": "Add \u00b0\n"}' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/pulls/1/reviews/1/dismissals?token=gdt_FgbJia27VFWIHiqc8JYzGxw37Xj9bXf5EkZXSqWQwyv&access_token=%C3%92%F2%A8%B4%BBw%C3%8C'

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/false/reviews/0/dismissals
POST/repos/{owner}/{repo}/push_mirrorsMissing test data
Server error on undeclared request Content-Type+2 moreless
  • Schema-valid request rejected
  • Undocumented status code
318

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"interval": "", "remote_address": "", "remote_password": "", "remote_username": "", "sync_on_commit": false}' http://0.0.0.0:41459/api/v1/repos/0/0/push_mirrors

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response400 Bad Request
{"message":"invalid interval: time: invalid duration \"\"","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/repos/admin/demo/push_mirrors

Undocumented status codeST103

Received: 422
Documented: 200, 400, 403, 404
Response422 Unprocessable Content
{"message":"[]: jsontext: invalid character '\\x00' at start of value","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d $'\x00' http://0.0.0.0:41459/api/v1/repos/admin/demo/push_mirrors

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/push_mirrors
GET/repos/{owner}/{repo}/raw/{filepath}
API accepts requests without authentication+2 moreless
  • Undocumented Content-Type
  • Undocumented status code
328

Undocumented Content-TypeST105

Received: application/json;charset=utf-8
Documented: application/octet-stream
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/0/0/raw/0?ref='

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/octet-stream
Response200 OK
<EMPTY>
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/raw/0

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/raw/{filepath}`
Response200 OK
<EMPTY>
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/raw/0

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: W5J!f' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/raw/%C3%94%C3%B6%C2%B4%C3%82%EA%B0%99%3F2j%C3%8F?token=nP5oOIizwitdNWl1l6vgERHal1cgaEDSjxyogWVn&sudo=%F0%BE%A9%AA%C3%A6%C3%98&ref=%C3%AA_%C2%B7s%F1%A6%BB%8C%C2%83%F0%BC%86%8Eb%15%C2%A4%F2%9D%B8%B2&access_token='
GET/repos/{owner}/{repo}/releases/{id}/assets/{attachment_id}
API accepts requests without authentication+2 moreless
  • Undocumented Content-Type
  • Undocumented status code
391

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/releases/{id}/assets/{attachment_id}`
Response200 OK
{"id":46,"name":"attachment","size":0,"download_count":0,"created_at":"2026-10-19T12:11:09Z","uuid":"84446c4d-0d93-4298-8213-5efe785a2718","browser_download_url":"http://0.0.0.0:41459/attachments/84446c4d-0d93-4298-8213-5efe785a2718"}
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/releases/1/assets/46

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/demo/releases/241/assets/1

Undocumented status codeST103

Received: 403
Documented: 200, 404
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'Authorization: 6Bm(' -H 'Sudo: E' 'http://0.0.0.0:41459/api/v1/repos/admin/%C3%89%C2%A8Q%C3%A8/releases/1/assets/-2595657?sudo=responses'
GET/repos/{owner}/{repo}/statuses/{sha}
API accepts requests without authentication+2 moreless
  • Response violates schema
  • Schema-violating request accepted
424

Response violates schemaST108

"" is not one of "pending", "success" or 4 other candidates

Validated against the response schema for status code 200.

Schema at /definitions/CommitStatus/properties/status:

    {
        "enum": [
            "pending",
            "success",
            "error",
            "failure",
            "warning",
            "skipped"
        ],
        "description": "State represents the status state (pending, success, erro...
        "type": "string",
        "x-go-enum-desc": "pending CommitStatusPending is for when the CommitStat...
        "x-go-name": "State"
    }

Value:

    ""
Response200 OK
[{"id":16,"status":"","target_url":"","description":"","url":"http://localhost:3000/api/v1/repos/admin/demo/statuses/8caabe76280791ab362a270cac3b5484415dc5ec","context":"","creator":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"1+admin@noreply.localhost","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00: // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/statuses/8caabe76280791ab362a270cac3b5484415dc5ec

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/statuses/{sha}`
Response200 OK
[{"id":16,"status":"","target_url":"","description":"","url":"http://localhost:3000/api/v1/repos/admin/demo/statuses/8caabe76280791ab362a270cac3b5484415dc5ec","context":"","creator":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"1+admin@noreply.localhost","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00: // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/statuses/8caabe76280791ab362a270cac3b5484415dc5ec

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `sort` in query - violates `enum` at /properties/sort
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/statuses/R%18%C3%9D%3B?sort=%2Ac%2C%F3%A4%A8%93%C3%80%C3%A0&limit=314'
POST/repos/{owner}/{repo}/tag_protections
Server error on undeclared request Content-Type+2 moreless
  • Schema-valid request rejected
  • Undocumented status code
587

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"name_pattern": "", "whitelist_teams": [], "whitelist_usernames": []}' http://0.0.0.0:41459/api/v1/repos/0/0/tag_protections

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 400
Documented: 201, 403, 404, 422, 423
Response400 Bad Request
{"message":"name_pattern are empty","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/repos/admin/demo/tag_protections

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/tag_protections

Undocumented status codeST103

Received: 401
Documented: 201, 403, 404, 422, 423
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: >14L' -H 'Content-Type: application/json' -d '{"?0\udbad\udde7\u00cdpv\uda3e\ude61": 3.171288755394349e+16, "": {"MissingContentType": {"\ud8d9\uded7\u001dK\u00b2\udb71\udca1\ud877\udea5\u00e8\u00d9\udaf7\udc21C\u00fe\u00e0D\u0086d": 1.5889484438739494e+16}, "U\u0087\u00fc\u00b4": {"\u0091\u9ca5\u008f\u00b2\u00f1\udab7\udf6a": 113112}, "\u0003\u0093\u0018": []}}' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/tag_protections?access_token=%10%F0%B6%9E%8C%19'
POST/repos/{owner}/{repo}/wiki/new
Server error on undeclared request Content-Type+2 moreless
  • Schema-valid request rejected
  • Undocumented status code
320

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"content_base64": "", "message": "", "title": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/wiki/new

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 201, 400, 403, 404, 423
Response422 Unprocessable Content
{"message":"[Title]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/repos/admin/demo/wiki/new

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 2 additional properties not defined in the schema (`¶’å*É`, `÷`). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.
Response400 Bad Request
{"message":"illegal base64 data at input byte 0","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\u00f7": [], "\u00b6\u0092\u00e5*\u00c9\u0014": {}, "title": "\u00ec>\ud9c9\udd4cq\u00e3\u00ab\udaab\udcc6\u0098\u009e", "content_base64": "\u00d3\ub939"}' http://0.0.0.0:41459/api/v1/repos/admin/demo/wiki/new
GET/repos/{owner}/{repo}/wiki/pages
API accepts requests without authentication+2 moreless
  • Schema-violating request accepted
  • Undocumented status code
383

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/wiki/pages`
Response200 OK
[{"title":"%~\u0019,q“0","html_url":"http://localhost:3000/admin/demo/wiki/%25~%19%2Cq%C2%930","sub_url":"%25~%19%2Cq%C2%930","last_commit":{"sha":"7d9b05e003a639281d6a22dee27c918e56626357","author":{"name":"admin","email":"admin@example.com","date":"2026-10-19T12:01:29Z"},"commiter":{"name":"admin","email":"admin@example.com","date":"2026-10-19T12:01:29Z"},"message":"Add Ùõð\u001b5!\f¤\"𫔵5\u0017Ú\n\n"}},{"title":"[•","html_url":"http://localhost:3000/admin/demo/wiki/%5B%C2%95","sub_url":"%5B%C2%95","last_c // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/wiki/pages

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - violates `type` at /properties/page (was integer, became boolean)
Response200 OK
[{"title":"%~\u0019,q“0","html_url":"http://localhost:3000/admin/demo/wiki/%25~%19%2Cq%C2%930","sub_url":"%25~%19%2Cq%C2%930","last_commit":{"sha":"7d9b05e003a639281d6a22dee27c918e56626357","author":{"name":"admin","email":"admin@example.com","date":"2026-10-19T12:01:29Z"},"commiter":{"name":"admin","email":"admin@example.com","date":"2026-10-19T12:01:29Z"},"message":"Add Ùõð\u001b5!\f¤\"𫔵5\u0017Ú\n\n"}},{"title":"[•","html_url":"http://localhost:3000/admin/demo/wiki/%5B%C2%95","sub_url":"%5B%C2%95","last_c // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/wiki/pages?page=false&limit=0'

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: S' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/wiki/pages?token=mpYCAsc2DCDBmuQnwIIBOysl5OYQzqYdN2sB9YVo&limit=72078628021320572928&access_token=%13%C2%BA%F1%9B%8C%BB%F2%85%A4%80%C3%88%C3%B4%F2%9D%8E%B0'
POST/user/applications/oauth2
Server error on undeclared request Content-Type+2 moreless
  • Schema-valid request rejected
  • Undocumented status code
520

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 201, 400
Response422 Unprocessable Content
{"message":"[Name]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"confidential_client": false, "name": "", "redirect_uris": [], "skip_secondary_authorization": false}' http://0.0.0.0:41459/api/v1/user/applications/oauth2

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"confidential_client": false, "name": "", "redirect_uris": [], "skip_secondary_authorization": false}' http://0.0.0.0:41459/api/v1/user/applications/oauth2

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 2 additional properties not defined in the schema (``, `´Ø񿖃÷c`). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.
Response400 Bad Request
{"message":"invalid redirect URI: tÇ\nJîQšÞ»ÿg>`\u0006k\\","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"": {}, "\u00b4\u00d8\ud9bd\udd83\u00f7c\u0016": {"\ud9e1\udf685\u00e4\u00f1\ud884\udc03W\udb7e\udc74\u0081\f\u008c\u008c4\u00bdDd6\uda26\udcee#4\ud8e7\udd1em": "\u00ff\u00e3I{\udbc0\udc66\bG\u00d7\ud97c\udc44\u0092\udbdf\uddb0\u00bcA\u00a2\u000bk\u00de"}, "name": "CC-BY-SA-4.0", "skip_secondary_authorization": true, "redirect_uris": ["t\u00c7\nJ\u00eeQ\u009a\u00de\u00bb\u00ffg>`\u0006k\\", "\udbd4\udd11`\udb7d\udccbH\u0098\b\u0086\u00f5$\ud8bb\ude4fq\u00b9\u00c2#", ""], "confidential_client": false}' http://0.0.0.0:41459/api/v1/user/applications/oauth2
DELETE/user/applications/oauth2/{id}
Server error+2 moreless
  • Missing Content-Type header
  • Undocumented status code
83

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 204, 404
Response500 Internal Server Error
{"message":"failed to delete OAuth2 application: application is locked: a4792ccc-144e-407e-86c9-5e7d8d9c3269","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/applications/oauth2/1

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/applications/oauth2/8
PATCH/user/applications/oauth2/{id}
Server error+2 moreless
  • Schema-valid request rejected
  • Undocumented status code
309

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 200, 400, 404
Response422 Unprocessable Content
{"message":"[Name]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"confidential_client": false, "name": "", "redirect_uris": [], "skip_secondary_authorization": false}' http://0.0.0.0:41459/api/v1/user/applications/oauth2/-9223372036854775808

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 1 additional property not defined in the schema (`𞽹`). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.
Response400 Bad Request
{"message":"invalid redirect URI: ƒg&","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\ud83b\udf79": {"\udbd6\udcc4_\udb34\udc70\u0010\u00e2\u00df*~\n\u0081$E|\u00dc\ud814\udf10\u009b\u001a5\ud822\uddab,7-\ud925\udc08Q\u00c2": true, "": false, "API probing": "\u00ca\u0007\u0001\u0095A\u00a3\u0092e\u007f\u00d7\ud8b4\ude13aN8\u00b6"}, "confidential_client": true, "redirect_uris": ["\u0083g&", "<\u008f\udb4a\udc81#", "o\u00f4\u00f0\ud858\udde2#", "\u00f4", "\u00dds", "\t", "\u001d\u00c5\ud9e4\udc68\u00cd", "d\u008f", "\u0098z\u00ac", "d", "\u00aa\u0084", "\u00d4\u00c3\b", "", "\f\u0005", "\u0010\u001c\u00ad\u00d7", "\ud9a7\ude26\u001c", "\u0002\u00b5y", "|", "", "False"], "skip_secondary_authorization": false, "name": "\u008d1B\u0011\u00f3W\ud8b5\udd40l\u00d3"}' http://0.0.0.0:41459/api/v1/user/applications/oauth2/1

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 200, 400, 404
Response500 Internal Server Error
{"message":"UID mismatch","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\u00a7W\ud86b\udebfa": {"\u0081\u00e5$\u00da6X": "\uda89\udfb9"}, "\\WV\u0082": ["\u008d\u00aa"], "\u0087\udbed\udf10@\u00f1Q\u0090uR\r": {"": [-1632485], "\u00d9": "\u00f5\ud992\ude0a'"'"'O", "LX[\u00ce\u00e7\udab4\udc945F": null}, "confidential_client": false, "redirect_uris": ["", "\uda8b\udc1a\u0099y#\u008d\u00b6\ud869\uddbb\udbf3\ude9a", "\u0094"], "name": "\u00f1", "skip_secondary_authorization": true}' http://0.0.0.0:41459/api/v1/user/applications/oauth2/1
POST/user/avatar
Server error on undeclared request Content-Type+2 moreless
  • Schema-valid request rejected
  • Undocumented status code
297

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 204
Response422 Unprocessable Content
{"message":"[Image]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"image": ""}' http://0.0.0.0:41459/api/v1/user/avatar

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"image": ""}' http://0.0.0.0:41459/api/v1/user/avatar

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 5 additional properties not defined in the schema (``, `O0,`, `^` and 2 more). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.

Undocumented status codeST103

Received: 400
Documented: 204
Response400 Bad Request
{"message":"illegal base64 data at input byte 1","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\ud98e\udece\u0001": {"c\u00f4\u00f5\u0018": -1.170018895432679e-34, "1?\u00c7\udbd5\udd2c\u00ad\u00ff\udb3c\udd53\u00d4": "V<E\ud878\uddc8\ud8b5\udda3d;\ud83a\udf68\udba9\udc9av", "\u0082\u00caS\uda55\ude62\u008c\u0090": null}, "": "B`", "^": {}, "O0,": {}, "\u008a\u889b\u00b5": [], "image": "7\u00a0\udb1a\ude2c-\u00a9\u00023"}' http://0.0.0.0:41459/api/v1/user/avatar
POST/user/hooks
Server error on undeclared request Content-Type+2 moreless
  • Schema-valid request rejected
  • Undocumented status code
568

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 201
Response422 Unprocessable Content
{"message":"Missing config option: url","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"active": false, "authorization_header": "", "branch_filter": "", "config": {}, "events": [], "name": "", "type": "dingtalk"}' http://0.0.0.0:41459/api/v1/user/hooks

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"active": false, "authorization_header": "", "branch_filter": "", "config": {}, "events": [], "name": "", "type": "dingtalk"}' http://0.0.0.0:41459/api/v1/user/hooks
POST/user/projects/{id}/columns/move
Server error on undeclared request Content-Type+2 moreless
  • Missing Content-Type header
  • Schema-valid request rejected
303

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"column_ids": []}' http://0.0.0.0:41459/api/v1/user/projects/-9223372036854775808/columns/move

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/projects/1/columns/move

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"column_ids": []}' http://0.0.0.0:41459/api/v1/user/projects/183/columns/move
POST/user/projects/{id}/columns/{column_id}/default
Server error on undeclared request Content-Type+2 moreless
  • Missing Content-Type header
  • Undocumented status code
246

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/user/projects/-9223372036854775808/columns/-9223372036854775808/default

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/projects/175/columns/34/default

Undocumented status codeST103

Received: 401
Documented: 204, 403, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H $'Authorization: &%f\t<xRR' 'http://0.0.0.0:41459/api/v1/user/projects/1/columns/1/default?access_token=%C2%8CM%08%12%C2%A3%F1%9A%88%86%0B%F1%8E%89%97%C3%91%C2%8E%C2%95%C3%8F&token=%F2%A0%B6%8DU&sudo=%F3%97%A5%A1~xG%C2%96%3D%C2%AE%11%3E%F1%91%B2%86%C2%8D%F4%86%BC%B2%C3%9D%C3%A4x%02%C2%89%5E%F0%AE%85%8F%C2%A8%F1%BD%B3%97ka%C3%A4'

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /users/search`
Response200 OK
{"ok":true,"data":[]}
Reproduce
curl -X GET 'http://0.0.0.0:41459/api/v1/users/search?q=&uid=-9223372036854775808&page=0&limit=0'

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `uid` in query - uid: Value greater than maximum
Response200 OK
{"ok":true,"data":[]}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/users/search?uid=9223372036854775808'

Undocumented status codeST103

Received: 401
Documented: 200
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: J:' 'http://0.0.0.0:41459/api/v1/users/search?token=mpYCAsc2DCDBmuQnwIIBOysl5OYQzqYdN2sB9YVo'
GET/users/{username}
API accepts requests without authentication+2 moreless
  • Response violates schema
  • Undocumented Content-Type
616

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /users/{username}`
Response200 OK
{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"1+admin@noreply.localhost","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":false,"prohibit_login":false,"location":"o\u0015$󆽳","website":"","description":"񶞪","visibility":"public","followers_ // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/users/admin

Response violates schemaST108

"" is not a "email"

Validated against the response schema for status code 200.

Schema at /properties/email:

    {
        "format": "email",
        "type": "string",
        "x-go-name": "Email"
    }

Value:

    ""
Response200 OK
{"id":8,"login":"X","type":"Organization","login_name":"","source_id":0,"full_name":"","email":"","avatar_url":"http://0.0.0.0:41459/avatars/255b032fc420520724ecad40e130b57df49168861284010117f62090ce902ce0","html_url":"http://0.0.0.0:41459/X","language":"","is_admin":false,"last_login":"1970-01-01T00:00:00Z","created":"2026-10-19T12:29:52Z","restricted":false,"active":true,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starre // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/users/X

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
  1. GET/user/emails
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/emails
  2. GET/users/0failed here
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/users/0
GET/users/{username}/heatmap
API accepts requests without authentication+2 moreless
  • Undocumented Content-Type
  • Undocumented status code
615

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /users/{username}/heatmap`
Response200 OK
[{"timestamp":1792410300,"contributions":1},{"timestamp":1792411200,"contributions":86}]
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/users/admin/heatmap

Undocumented status codeST103

Received: 403
Documented: 200, 404
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'Authorization;' 'http://0.0.0.0:41459/api/v1/users/admin/heatmap?sudo=M%19~%C2%A9_%17%09%C2%9B%C2%8A%C3%9D%C3%BA%06%C2%99%C2%B6'

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization;' 'http://0.0.0.0:41459/api/v1/users/admin/heatmap?sudo=67%16y%C3%8F%C2%95%3AW&token=%5E%08%C2%9FH%F0%BF%A2%93%C2%8F%C3%AEl%C2%BB&access_token=%C2%92%F1%86%A9%BE%25%C3%AF'

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
  1. GET/user/emails
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/emails
  2. GET/users/0/heatmapfailed here
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/users/0/heatmap
POST/users/{username}/tokens
Server error on undeclared request Content-Type+2 moreless
  • Schema-valid request rejected
  • Undocumented status code
591

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 201, 400, 403
Response422 Unprocessable Content
{"message":"[Name]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"scopes": ["all", "read:activitypub", "read:issue", "write:misc", "read:notification", "read:organization", "read:package", "read:repository", "read:user"], "name": ""}' http://0.0.0.0:41459/api/v1/users/admin/tokens

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"name": "", "scopes": ["all", "read:activitypub", "read:issue", "write:misc", "read:notification", "read:organization", "read:package", "read:repository", "read:user"]}' http://0.0.0.0:41459/api/v1/users/workbench-user/tokens

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 2 additional properties not defined in the schema (`ۈ`, `Ü`). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.
Response400 Bad Request
{"message":"invalid access token scope provided: invalid access token scope: žãSÉ\r򛿭I","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\u00db\u0088": {}, "\u00dc": {"\u34c1": -1.428190869922906e+16, "\ud8b2\uddc0\u0096\udbd4\ude62m\ud9bd\ude308\u00d9\u0014\u00b3\u009b\u008f\ub877\u00e2\u008a\u00b0": false, "\ud873\udca4": false}, "name": "\u00d9\u00f5\u00f0\u001b5!\f\u00a4\"\ud86d\udd355\u0017\u00da", "scopes": ["\u009e\u00e3S\u00c9\r\uda2f\udfedI"]}' http://0.0.0.0:41459/api/v1/users/admin/tokens

Undocumented status codeST103

Received: 404
Documented: 201, 400, 403
Response404 Not Found
{"message":"user redirect does not exist [name: 󢑌þ]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\u00e2a\u00ca[\u00e66\ud979\ude712\u00df\ud8f3\ude2e\ud8e9\udd55\u00db\u00c9S": {"": true, "\u00c0\u00d4\ud947\udd27kU": [12233883359138328, {}, {"\u851d\ud8ce\udfaeL\u00a8\ud99a\udd1fY": -1.192092896e-07, "\u1e70\u033a\u033a\u0315o\u035e \u0337i\u0332\u032c\u0347\u032a\u0359n\u031d\u0317\u0355v\u031f\u031c\u0318\u0326\u035fo\u0336\u0319\u0330\u0320k\u00e8\u035a\u032e\u033a\u032a\u0339\u0331\u0324 \u0316t\u031d\u0355\u0333\u0323\u033b\u032a\u035eh\u033c\u0353\u0332\u0326\u0333\u0318\u0332e\u0347\u0323\u0330\u0326\u032c\u034e \u0322\u033c\u033b\u0331\u0318h\u035a\u034e\u0359\u031c\u0323\u0332\u0345i\u0326\u0332\u0323\u0330\u0324v\u033b\u034de\u033a\u032d\u0333\u032a\u0330-m\u0322i\u0345n\u0316\u033a\u031e\u0332\u032f\u0330d\u0335\u033c\u031f\u0359\u0329\u033c\u0318\u0333 \u031e\u0325\u0331\u0333\u032dr\u031b\u0317\u0318e\u0359p\u0360r\u033c\u031e\u033b\u032d\u0317e\u033a\u0320\u0323\u035fs\u0318\u0347\u0333\u034d\u031d\u0349e\u0349\u0325\u032f\u031e\u0332\u035a\u032c\u035c\u01f9\u032c\u034e\u034e\u031f\u0316\u0347\u0324t\u034d\u032c\u0324\u0353\u033c\u032d\u0358\u0345i\u032a\u0331n\u0360g\u0334\u0349 \u034f\u0349\u0345c\u032c\u031fh\u0361a\u032b\u033b\u032f\u0358o\u032b\u031f\u0316\u034d\u0319\u031d\u0349s\u0317\u0326\u0332.\u0328\u0339\u0348\u0323": "\u00f4d\u007f\u00e6\ud902\udc04\u00f3W\u00bb"}]}, "\ud981\ude3f": [], "(\udb4b\udf12\u008aq\ud950\ude2b\u00f4\u0091": [[], {"\u0000-\u00a9\u0007\u009f}": -9809130236199552.0, "\u00ed\udb38\udd59\u00c2\ud9c5\udc37~\uda3a\udcef\u00cf": null, "": "\udbf2\uddb2$\u00bc\t\u00e7+\r\u00e5\u00eb\u00b5\u00f8\u00af"}, "\u00d7q("], "\u00cb\ud95f\udc62\u009b\udb6e\udc52": [{}], "&\udb76\udd21{\u0094": 6959266399099616.0, "name": "\uda41\ude6a", "scopes": ["#`j\u00b8t\u001b\u00e0", "\u0090;\u00dd\u00b9\u0015"]}' http://0.0.0.0:41459/api/v1/users/%F3%A2%91%8C%C3%9E/tokens

Undocumented status codeST103

Received: 401
Documented: 201, 400, 403
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: 4:#' -H 'Sudo: -v,!/iAcZp9J' 'http://0.0.0.0:41459/api/v1/users/admin/tokens?token=y4PpAVhvitJhDNjIbHHGFXAsuqTKHG8a0zShyEHK'
PATCH/admin/hooks/{id}
Server error+1 moreless
  • Undocumented status code
356

Server errorST101

Undocumented status codeST103

Received: 500
Documented: 200
Response500 Internal Server Error
{"message":"webhook does not exist [id: -9223372036854775808]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"active": false, "authorization_header": "", "branch_filter": "", "config": {}, "events": [], "name": ""}' http://0.0.0.0:41459/api/v1/admin/hooks/-9223372036854775808

Undocumented status codeST103

Received: 422
Documented: 200
Response422 Unprocessable Content
{"message":"[]: json: unable to unmarshal JSON object into Go string within \"/name\"","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"active": false, "authorization_header": "", "branch_filter": "", "config": {}, "events": [], "name": {}}' http://0.0.0.0:41459/api/v1/admin/hooks/-9223372036854775808
POST/admin/users
Server error on undeclared request Content-Type+1 moreless
  • Schema-valid request rejected
570

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[Username]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"created_at": "2000-01-01T00:00:00Z", "email": "", "full_name": "", "login_name": "", "must_change_password": false, "password": "", "restricted": false, "send_notify": false, "source_id": 0, "username": "", "visibility": "public"}' http://0.0.0.0:41459/api/v1/admin/users

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"created_at": "2000-01-01T00:00:00Z", "email": "", "full_name": "", "login_name": "", "must_change_password": false, "password": "", "restricted": false, "send_notify": false, "source_id": 0, "username": "", "visibility": "public"}' http://0.0.0.0:41459/api/v1/admin/users
GET/licenses
API accepts requests without authentication+1 moreless
  • Undocumented status code
1,023

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /licenses`
Response200 OK
[{"key":"0BSD","name":"0BSD","url":"http://localhost:3000/api/v1/licenses/0BSD"},{"key":"AGPL-3.0","name":"AGPL-3.0","url":"http://localhost:3000/api/v1/licenses/AGPL-3.0"},{"key":"Apache-2.0","name":"Apache-2.0","url":"http://localhost:3000/api/v1/licenses/Apache-2.0"},{"key":"BSD-2-Clause","name":"BSD-2-Clause","url":"http://localhost:3000/api/v1/licenses/BSD-2-Clause"},{"key":"BSD-3-Clause","name":"BSD-3-Clause","url":"http://localhost:3000/api/v1/licenses/BSD-3-Clause"},{"key":"BSD-3-Clause-Clear","name // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/licenses

Undocumented status codeST103

Received: 403
Documented: 200
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'X-GITEA-OTP: Tt$' -H 'Sudo: ;@QB: ;tX(' -H 'Authorization: rShM{' http://0.0.0.0:41459/api/v1/licenses

Undocumented status codeST103

Received: 401
Documented: 200
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization;' 'http://0.0.0.0:41459/api/v1/licenses?sudo=%C3%B7%C3%85%C3%90%F2%BE%A5%9CF%C3%96%12%F2%B6%99%97%C2%92%F1%A4%89%87%3F%F2%AF%A1%B4&access_token=%F1%87%98%93%C2%BB%F0%B1%A9%8FFJ%C2%80%C2%86%F1%A8%94%A3&token=gdt_cOVnCMcLyABeu6KFtume2El5OaWoBbO1ti8ujRaMrz5'
POST/org/{org}/repos
Server error on undeclared request Content-Type+1 moreless
  • Schema-valid request rejected
383

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[Name]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"auto_init": false, "default_branch": "", "description": "", "gitignores": "", "issue_labels": "", "license": "", "name": "", "object_format_name": "sha1", "private": false, "readme": "", "template": false, "trust_model": "default"}' http://0.0.0.0:41459/api/v1/org/0/repos

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"auto_init": false, "default_branch": "", "description": "", "gitignores": "", "issue_labels": "", "license": "", "name": "", "object_format_name": "sha1", "private": false, "readme": "", "template": false, "trust_model": "default"}' http://0.0.0.0:41459/api/v1/org/0/repos
GET/orgs
API accepts requests without authentication+1 moreless
  • Schema-violating request accepted
609

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /orgs`
Response200 OK
[{"id":3,"name":"workbench","full_name":"","email":"","avatar_url":"http://0.0.0.0:41459/avatars/1f303fd10424e23d36ee4dbd6af13c4d735f75bfe318b1259474fa53863403ba","description":"","website":"","location":"","visibility":"public","repo_admin_change_team_access":false,"username":"workbench"}]
Reproduce
curl -X GET 'http://0.0.0.0:41459/api/v1/orgs?page=0&limit=0'

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
[{"id":3,"name":"workbench","full_name":"","email":"","avatar_url":"http://0.0.0.0:41459/avatars/1f303fd10424e23d36ee4dbd6af13c4d735f75bfe318b1259474fa53863403ba","description":"","website":"","location":"","visibility":"public","repo_admin_change_team_access":false,"username":"workbench"}]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/orgs?page=null&page=null'
POST/orgs
Server error on undeclared request Content-Type+1 moreless
  • Schema-valid request rejected
362

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[UserName]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"description": "", "email": "", "full_name": "", "location": "", "repo_admin_change_team_access": false, "username": "", "visibility": "public", "website": ""}' http://0.0.0.0:41459/api/v1/orgs

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"description": "", "email": "", "full_name": "", "location": "", "repo_admin_change_team_access": false, "username": "", "visibility": "public", "website": ""}' http://0.0.0.0:41459/api/v1/orgs
GET/orgs/{org}/labels
API accepts requests without authentication+1 moreless
  • Schema-violating request accepted
398

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /orgs/{org}/labels`
Response200 OK
[{"id":26,"name":"AGPL-3.0","exclusive":false,"is_archived":false,"color":"00aabb","description":"","url":"http://localhost:3000/api/v1/orgs/UndefinedContentType/labels/26"},{"id":20,"name":"Apache-2.0","exclusive":false,"is_archived":false,"color":"00aabb","description":"","url":"http://localhost:3000/api/v1/orgs/UndefinedContentType/labels/20"},{"id":29,"name":"BSD-2-Clause","exclusive":false,"is_archived":false,"color":"00aabb","description":"","url":"http://localhost:3000/api/v1/orgs/UndefinedContentTyp // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/orgs/workbench/labels

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `limit` in query - violates `type` at /properties/limit (was integer, became boolean)
Response200 OK
[{"id":26,"name":"AGPL-3.0","exclusive":false,"is_archived":false,"color":"00aabb","description":"","url":"http://localhost:3000/api/v1/orgs/UndefinedContentType/labels/26"},{"id":20,"name":"Apache-2.0","exclusive":false,"is_archived":false,"color":"00aabb","description":"","url":"http://localhost:3000/api/v1/orgs/UndefinedContentType/labels/20"},{"id":29,"name":"BSD-2-Clause","exclusive":false,"is_archived":false,"color":"00aabb","description":"","url":"http://localhost:3000/api/v1/orgs/UndefinedContentTyp // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/orgs/workbench/labels?limit=false&page=-200'
POST/orgs/{org}/labels
Server error on undeclared request Content-Type+1 moreless
  • Schema-valid request rejected
271

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[Name]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"color": "#00aabb", "exclusive": false, "is_archived": false, "description": "", "name": ""}' http://0.0.0.0:41459/api/v1/orgs/workbench/labels

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"color": "#00aabb", "description": "", "exclusive": false, "is_archived": false, "name": ""}' http://0.0.0.0:41459/api/v1/orgs/0/labels
GET/orgs/{org}/projects
API accepts requests without authentication+1 moreless
  • Schema-violating request accepted
419

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /orgs/{org}/projects`
Response200 OK
[{"id":67,"title":"First issue","description":"","owner_id":3,"repo_id":0,"creator":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"1+admin@noreply.localhost","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":false,"prohibit_login":false,"lo // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/orgs/workbench/projects

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - violates `type` at /properties/page (was integer, became null)
Response200 OK
[{"id":67,"title":"First issue","description":"","owner_id":3,"repo_id":0,"creator":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":true,"last_login":"1970-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":true,"prohibit_login":false,"location":"" // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/orgs/workbench/projects?page=null&state=all&limit=936602'
POST/orgs/{org}/projects/{id}/columns/{column_id}/defaultMissing test data
Server error on undeclared request Content-Type+1 moreless
  • Undocumented Content-Type
291

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/orgs/0/projects/-9223372036854775808/columns/-9223372036854775808/default

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/projects/1/columns/1/default
POST/orgs/{org}/projects/{id}/columns/{column_id}/issues/{issue_id}Missing test data
Server error on undeclared request Content-Type+1 moreless
  • Undocumented Content-Type
296

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/orgs/0/projects/-9223372036854775808/columns/-9223372036854775808/issues/1

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/projects/1/columns/1/issues/2
POST/packages/{owner}/{type}/{name}/-/unlinkMissing test data
Server error on undeclared request Content-Type+1 moreless
  • Undocumented status code
305

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/packages/0/0/0/-/unlink

Undocumented status codeST103

Received: 401
Documented: 201, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'X-GITEA-OTP: k' -H 'Authorization: \.T,C`J' 'http://0.0.0.0:41459/api/v1/packages/admin/individual/L%F1%92%AB%85m%F0%B8%B6%AC%01/-/unlink?access_token=%C3%82%0B&sudo=%F0%AE%B4%A7%C2%93CZ%C2%A1%C3%A6%7F&token=y4PpAVhvitJhDNjIbHHGFXAsuqTKHG8a0zShyEHK'
POST/repos/migrate
Server error on undeclared request Content-Type+1 moreless
  • Schema-valid request rejected
467

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[CloneAddr]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"auth_password": "", "auth_token": "", "auth_username": "", "aws_access_key_id": "", "aws_secret_access_key": "", "clone_addr": "", "description": "", "issues": false, "labels": false, "lfs": false, "lfs_endpoint": "", "milestones": false, "mirror": false, "mirror_interval": "", "private": false, "pull_requests": false, "releases": false, "repo_name": "", "repo_owner": "", "service": "git", "uid": 0, "wiki": false}' http://0.0.0.0:41459/api/v1/repos/migrate

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"auth_password": "", "auth_token": "", "auth_username": "", "aws_access_key_id": "", "aws_secret_access_key": "", "clone_addr": "", "description": "", "issues": false, "labels": false, "lfs": false, "lfs_endpoint": "", "milestones": false, "mirror": false, "mirror_interval": "", "private": false, "pull_requests": false, "releases": false, "repo_name": "", "repo_owner": "", "service": "git", "uid": 0, "wiki": false}' http://0.0.0.0:41459/api/v1/repos/migrate
GET/repos/{owner}/{repo}
API accepts requests without authentication+1 moreless
  • Undocumented status code
355

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}`
Response200 OK
{"id":1,"owner":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":false,"prohibit_login":false,"location":"o\u0015$󆽳","website":"","description":"񶞪","visibility":"public","fo // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization;' 'http://0.0.0.0:41459/api/v1/repos/admin/demo?sudo=%0A%C3%84s%5Cq%0C&access_token=%3A%F3%BD%A8%9F%F3%93%B1%AD%C2%A23%F3%99%9E%91%F1%9D%8D%95%F3%8C%84%97%C3%99%C2%9A%F0%A8%BA%89i%C3%B8%60&token=%C2%81%F1%B6%BF%8D%C2%A7'
POST/repos/{owner}/{repo}/actions/runners/registration-token
Server error on undeclared request Content-Type+1 moreless
  • Undocumented status code
304

Undocumented status codeST103

Received: 404
Documented: 200
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/actions/runners/registration-token

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/repos/0/0/actions/runners/registration-token
GET/repos/{owner}/{repo}/actions/tasks
API accepts requests without authentication+1 moreless
  • Schema-violating request accepted
374

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/actions/tasks`
Response200 OK
{"workflow_runs":[],"total_count":0}
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/actions/tasks

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameters `page`, `limit` in query
  - violates `type` at /properties/page (was integer, became boolean)
  - violates `type` at /properties/limit (was integer, became boolean)
Response200 OK
{"workflow_runs":[],"total_count":0}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/actions/tasks?limit=false&page=false'
GET/repos/{owner}/{repo}/activities/feeds
API accepts requests without authentication+1 moreless
  • Response violates schema
393

Response violates schemaST108

null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/User:

    {
        "type": "object",
        "description": "User represents a user",
        "properties": {
            "active": {
                "description": "Is user active",
                "type": "boolean",
                "x-go-name": "IsActive"
            },
            "avatar_url": {
                "description": "URL to the user's avatar",
                "type": "string",
                "x-go-name": "AvatarURL"
            },
            "created": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Created"
            },
        // Output truncated...
    }

Value:

    null
Response200 OK
[{"id":73,"user_id":1,"op_type":"comment_issue","act_user_id":1,"act_user":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":true,"last_login":"1970-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":true,"prohibit_login":false,"location":"","website // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/activities/feeds

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/activities/feeds`
Response200 OK
[{"id":73,"user_id":1,"op_type":"comment_issue","act_user_id":1,"act_user":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"1+admin@noreply.localhost","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":false,"prohibit_login":false,"location":" // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/activities/feeds

Response violates schemaST108

null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/Comment:

    {
        "type": "object",
        "description": "Comment represents a comment on a commit or issue",
        "properties": {
            "assets": {
                "description": "Attachments contains files attached to the comment",
                "type": "array",
                "items": {
                    "$ref": "#/components/schemas/Attachment"
                },
                "x-go-name": "Attachments"
            },
            "body": {
                "description": "Body contains the comment text content",
                "type": "string",
                "x-go-name": "Body"
            },
            "created_at": {
                "type": "string",
        // Output truncated...
    }

Value:

    null
Response200 OK
[{"id":73,"user_id":1,"op_type":"comment_issue","act_user_id":1,"act_user":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":true,"last_login":"1970-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":true,"prohibit_login":false,"location":"","website // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/activities/feeds?limit=344809'
GET/repos/{owner}/{repo}/contents
API accepts requests without authentication+1 moreless
  • Response violates schema
391

Response violates schemaST1084 violations

null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/ContentsResponse/properties/content:

    {
        "type": "string",
        "description": "`content` is populated when `type` is `file`, otherwise n...
        "x-go-name": "Content"
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/ContentsResponse/properties/encoding:

    {
        "type": "string",
        "description": "`encoding` is populated when `type` is `file`, otherwise ...
        "x-go-name": "Encoding"
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/ContentsResponse/properties/submodule_git_url:

    {
        "type": "string",
        "description": "`submodule_git_url` is populated when `type` is `submodul...
        "x-go-name": "SubmoduleGitURL"
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/ContentsResponse/properties/target:

    {
        "type": "string",
        "description": "`target` is populated when `type` is `symlink`, otherwise...
        "x-go-name": "Target"
    }

Value:

    null
Response200 OK
[{"name":"\u001cQ¬nÊ\\","path":"\u001cQ¬nÊ\\","sha":"e69de29bb2d1d6434b8b29ae775ad8c2e48c5391","last_commit_sha":"0d9632e9e701a97632fa6788ffcf5aee19295cab","last_committer_date":"2026-10-19T12:00:12Z","last_author_date":"2026-10-19T12:00:12Z","type":"file","mode":"100644","size":0,"encoding":null,"content":null,"target":null,"url":"http://localhost:3000/api/v1/repos/admin/demo/contents/%1CQ%C2%ACn%C3%8A%5C?ref=main","html_url":"http://0.0.0.0:41459/admin/demo/src/branch/main/%1CQ%C2%ACn%C3%8A%5C","git_url": // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/contents

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/contents`
Response200 OK
[{"name":"\u001cQ¬nÊ\\","path":"\u001cQ¬nÊ\\","sha":"e69de29bb2d1d6434b8b29ae775ad8c2e48c5391","last_commit_sha":"0d9632e9e701a97632fa6788ffcf5aee19295cab","last_committer_date":"2026-10-19T12:00:12Z","last_author_date":"2026-10-19T12:00:12Z","type":"file","mode":"100644","size":0,"encoding":null,"content":null,"target":null,"url":"http://localhost:3000/api/v1/repos/admin/demo/contents/%1CQ%C2%ACn%C3%8A%5C?ref=main","html_url":"http://0.0.0.0:41459/admin/demo/src/branch/main/%1CQ%C2%ACn%C3%8A%5C","git_url": // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/contents
POST/repos/{owner}/{repo}/contents
Server error on undeclared request Content-Type+1 moreless
  • Response violates schema
494

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"author": {"email": "0@0.com", "name": ""}, "branch": "", "committer": {"email": "0@0.com", "name": ""}, "dates": {"author": "2000-01-01T00:00:00Z", "committer": "2000-01-01T00:00:00Z"}, "files": [], "force_push": false, "message": "", "new_branch": "", "signoff": false}' http://0.0.0.0:41459/api/v1/repos/0/0/contents

Response violates schemaST1082 violations

null is not of type "array"

Validated against the response schema for status code 201.

Schema at /definitions/FilesResponse/properties/files:

    {
        "type": "array",
        "description": "Files contains the list of file contents and metadata",
        "items": {
            "$ref": "#/components/schemas/ContentsResponse"
        },
        "x-go-name": "Files"
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 201.

Schema at /definitions/PayloadUser:

    {
        "type": "object",
        "description": "PayloadUser represents the author or committer of a commit",
        "properties": {
            "email": {
                "type": "string",
                "format": "email",
                "x-go-name": "Email"
            },
            "name": {
                "description": "Full name of the commit author",
                "type": "string",
                "x-go-name": "Name"
            },
            "username": {
                "description": "username of the user",
                "type": "string",
                "x-go-name": "UserName"
            }
        // Output truncated...
    }

Value:

    null
Response201 Created
{"files":null,"commit":{"url":"http://localhost:3000/api/v1/repos/admin/demo/git/commits/3363a017ae8e2d65d9d14ccea9945425690924e4","sha":"3363a017ae8e2d65d9d14ccea9945425690924e4","created":"0001-01-01T00:00:00Z","html_url":"http://0.0.0.0:41459/admin/demo/commit/3363a017ae8e2d65d9d14ccea9945425690924e4","author":{"name":"admin","email":"admin@example.com","date":"2026-10-19T12:00:07Z"},"committer":{"name":"admin","email":"admin@example.com","date":"2026-10-19T12:00:07Z"},"parents":[{"url":"http://localhost // Output truncated...
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"files": []}' http://0.0.0.0:41459/api/v1/repos/admin/demo/contents
GET/repos/{owner}/{repo}/contents/{filepath}
API accepts requests without authentication+1 moreless
  • Response violates schema
347

Response violates schemaST1082 violations

null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/ContentsResponse/properties/submodule_git_url:

    {
        "type": "string",
        "description": "`submodule_git_url` is populated when `type` is `submodul...
        "x-go-name": "SubmoduleGitURL"
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/ContentsResponse/properties/target:

    {
        "type": "string",
        "description": "`target` is populated when `type` is `symlink`, otherwise...
        "x-go-name": "Target"
    }

Value:

    null
Response200 OK
{"name":"0","path":"0","sha":"e69de29bb2d1d6434b8b29ae775ad8c2e48c5391","last_commit_sha":"fc3aaa3861ba9956a8b17b02fb198b2c6fb2f9ed","last_committer_date":"2026-10-19T12:00:10Z","last_author_date":"2026-10-19T12:00:10Z","type":"file","mode":"100644","size":0,"encoding":"base64","content":"","target":null,"url":"http://localhost:3000/api/v1/repos/admin/demo/contents/0?ref=main","html_url":"http://0.0.0.0:41459/admin/demo/src/branch/main/0","git_url":"http://0.0.0.0:41459/api/v1/repos/admin/demo/git/blobs/e69 // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/contents/0

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/contents/{filepath}`
Response200 OK
{"name":"0","path":"0","sha":"e69de29bb2d1d6434b8b29ae775ad8c2e48c5391","last_commit_sha":"fc3aaa3861ba9956a8b17b02fb198b2c6fb2f9ed","last_committer_date":"2026-10-19T12:00:10Z","last_author_date":"2026-10-19T12:00:10Z","type":"file","mode":"100644","size":0,"encoding":"base64","content":"","target":null,"url":"http://localhost:3000/api/v1/repos/admin/demo/contents/0?ref=main","html_url":"http://0.0.0.0:41459/admin/demo/src/branch/main/0","git_url":"http://0.0.0.0:41459/api/v1/repos/admin/demo/git/blobs/e69 // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/contents/0
GET/repos/{owner}/{repo}/forks
API accepts requests without authentication+1 moreless
  • Schema-violating request accepted
400

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/forks`
Response200 OK
[]
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/forks

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - violates `type` at /properties/page (was integer, became null)
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/forks?page=null&limit=101314326562'
GET/repos/{owner}/{repo}/git/blobs/{sha}
API accepts requests without authentication+1 moreless
  • Schema-valid request rejected
374

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/git/blobs/{sha}`
Response200 OK
{"content":"dHJlZSAyNzYyMzlhZjliZjJkYmU2ODg3ZDRkNjIwYWZjMmIwZTFkOTNhYjhjCmF1dGhvciBhZG1pbiA8YWRtaW5AZXhhbXBsZS5jb20+IDE3OTI0MTA5MDggKzAwMDAKY29tbWl0dGVyIGFkbWluIDxhZG1pbkBleGFtcGxlLmNvbT4gMTc5MjQxMDkwOCArMDAwMAoKSW5pdGlhbCBjb21taXQK","encoding":"base64","url":"http://localhost:3000/api/v1/repos/admin/demo/git/blobs/8caabe76280791ab362a270cac3b5484415dc5ec","sha":"8caabe76280791ab362a270cac3b5484415dc5ec","size":165}
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/git/blobs/8caabe76280791ab362a270cac3b5484415dc5ec

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response400 Bad Request
{"message":"length 8 has no matched object format: 񈻽Ô ","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/git/blobs/%F1%88%BB%BD%C3%94%C2%A0
GET/repos/{owner}/{repo}/git/refs
API accepts requests without authentication+1 moreless
  • Undocumented status code
402

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/git/refs`
Response200 OK
[{"ref":"refs/heads/main","url":"http://localhost:3000/api/v1/repos/admin/demo/git/refs/heads/main","object":{"type":"commit","sha":"ba211db62679a70982d196bf27a09b9217d0d4c0","url":"http://localhost:3000/api/v1/repos/admin/demo/git/commits/ba211db62679a70982d196bf27a09b9217d0d4c0"}},{"ref":"refs/heads/“","url":"http://localhost:3000/api/v1/repos/admin/demo/git/refs/heads/%C2%93","object":{"type":"commit","sha":"8caabe76280791ab362a270cac3b5484415dc5ec","url":"http://localhost:3000/api/v1/repos/admin/demo/gi // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/git/refs

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: b%)@\lg' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/git/refs?access_token=%C3%898%21%C3%82%F0%B3%B5%B9%3B%10O%C2%A3e&token=gdt_cOVnCMcLyABeu6KFtume2El5OaWoBbO1ti8ujRaMrz5'
GET/repos/{owner}/{repo}/issues/comments
API accepts requests without authentication+1 moreless
  • Undocumented status code
433

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/issues/comments`
Response200 OK
[{"id":1,"html_url":"http://0.0.0.0:41459/admin/demo/issues/1#issuecomment-1","pull_request_url":"","issue_url":"http://0.0.0.0:41459/admin/demo/issues/1","user":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"1+admin@noreply.localhost","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026 // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/comments

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: OwU8' -H 'Sudo: w&ku' -H 'X-GITEA-OTP: }ZZ/*5Y r e~ Z2wEq' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/comments?access_token=w%C2%BB%2B%3C%C3%A3%C3%BA%C2%90%C2%93&sudo=%C3%99Y%C3%89%C2%97%F3%BF%9B%B0s%22%F1%82%B5%85%C3%B7&before=2026-10-19T12%3A09%3A58Z&page=262893&token=gdt_cOVnCMcLyABeu6KFtume2El5OaWoBbO1ti8ujRaMrz5'
GET/repos/{owner}/{repo}/issues/pinned
API accepts requests without authentication+1 moreless
  • Response violates schema
389

Response violates schemaST1087 violations

null is not of type "array"

Validated against the response schema for status code 200.

Schema at /definitions/Issue/properties/assignees:

    {
        "type": "array",
        "items": {
            "$ref": "#/components/schemas/User"
        },
        "x-go-name": "Assignees"
    }

Value:

    null
null is not of type "array"

Validated against the response schema for status code 200.

Schema at /definitions/Issue/properties/projects:

    {
        "type": "array",
        "items": {
            "$ref": "#/components/schemas/Project"
        },
        "x-go-name": "Projects"
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/Milestone:

    {
        "type": "object",
        "description": "Milestone milestone is a collection of issues on one repo...
        "properties": {
            "closed_at": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Closed"
            },
            "closed_issues": {
                "description": "ClosedIssues is the number of closed issues in th...
                "type": "integer",
                "format": "int64",
                "x-go-name": "ClosedIssues"
            },
            "created_at": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Created"
        // Output truncated...
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/PullRequestMeta:

    {
        "type": "object",
        "description": "PullRequestMeta PR info if an issue is a PR",
        "properties": {
            "draft": {
                "type": "boolean",
                "x-go-name": "IsWorkInProgress"
            },
            "html_url": {
                "type": "string",
                "x-go-name": "HTMLURL"
            },
            "merged": {
                "type": "boolean",
                "x-go-name": "HasMerged"
            },
            "merged_at": {
                "type": "string",
                "format": "date-time",
        // Output truncated...
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/User:

    {
        "type": "object",
        "description": "User represents a user",
        "properties": {
            "active": {
                "description": "Is user active",
                "type": "boolean",
                "x-go-name": "IsActive"
            },
            "avatar_url": {
                "description": "URL to the user's avatar",
                "type": "string",
                "x-go-name": "AvatarURL"
            },
            "created": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Created"
            },
        // Output truncated...
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/Issue/properties/closed_at:

    {
        "type": "string",
        "format": "date-time",
        "x-go-name": "Closed"
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/Issue/properties/due_date:

    {
        "type": "string",
        "format": "date-time",
        "x-go-name": "Deadline"
    }

Value:

    null
Response200 OK
[{"id":1,"url":"http://localhost:3000/api/v1/repos/admin/demo/issues/1","html_url":"http://0.0.0.0:41459/admin/demo/issues/1","number":1,"user":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":true,"last_login":"1970-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restrict // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/pinned

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/issues/pinned`
Response200 OK
[{"id":1,"url":"http://localhost:3000/api/v1/repos/admin/demo/issues/1","html_url":"http://0.0.0.0:41459/admin/demo/issues/1","number":1,"user":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"1+admin@noreply.localhost","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z", // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/pinned
GET/repos/{owner}/{repo}/issues/{index}/reactions
API accepts requests without authentication+1 moreless
  • Response violates schema
406

Response violates schemaST108

null is not of type "array"

Validated against the response schema for status code 200.

Schema:

    {
        "type": "array",
        "items": {
            "$ref": "#/components/schemas/Reaction"
        },
        "components": {
            "schemas": {
                "User": {
                    "description": "User represents a user",
                    "type": "object",
                    "properties": {
                        "active": {
                            "description": "Is user active",
                            "type": "boolean",
                            "x-go-name": "IsActive"
                        },
                        "avatar_url": {
                            "description": "URL to the user's avatar",
                            "type": "string",
        // Output truncated...
    }

Value:

    null
Response200 OK
null
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/reactions

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/issues/{index}/reactions`
Response200 OK
null
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/reactions
POST/repos/{owner}/{repo}/issues/{index}/stopwatch/start
Server error on undeclared request Content-Type+1 moreless
  • Missing Content-Type header
292

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/repos/0/0/issues/-9223372036854775808/stopwatch/start

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response201 Created
<EMPTY>
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/stopwatch/start
POST/repos/{owner}/{repo}/issues/{index}/stopwatch/stop
Server error on undeclared request Content-Type+1 moreless
  • Missing Content-Type header
317

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/repos/0/0/issues/-9223372036854775808/stopwatch/stop

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response201 Created
<EMPTY>
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/stopwatch/stop
GET/repos/{owner}/{repo}/issues/{index}/subscriptions
API accepts requests without authentication+1 moreless
  • Schema-violating request accepted
399

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/issues/{index}/subscriptions`
Response200 OK
[]
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/subscriptions

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameters `page`, `limit` in query
  - violates `type` at /properties/page (was integer, became null)
  - violates `type` at /properties/limit (was integer, became null)
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/subscriptions?page=null&limit=null'
POST/repos/{owner}/{repo}/keysMissing test data
Server error on undeclared request Content-Type+1 moreless
  • Schema-valid request rejected
603

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"key": "", "read_only": false, "title": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/keys

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"Invalid key content: extractTypeFromBase64Key: invalid key format: %!w(<nil>)","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"key": "0BSD", "title": "First issue"}' http://0.0.0.0:41459/api/v1/repos/admin/demo/keys
POST/repos/{owner}/{repo}/keys/tokens
Server error on undeclared request Content-Type+1 moreless
  • Schema-valid request rejected
598

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"read_only": false, "title": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/keys/tokens

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"A key with the same name already exists","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"title": "First issue"}' http://0.0.0.0:41459/api/v1/repos/admin/demo/keys/tokens
POST/repos/{owner}/{repo}/labels
Server error on undeclared request Content-Type+1 moreless
  • Schema-valid request rejected
512

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[Name]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"color": "#00aabb", "exclusive": false, "is_archived": false, "description": "", "name": ""}' http://0.0.0.0:41459/api/v1/repos/admin/demo/labels

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"color": "#00aabb", "description": "", "exclusive": false, "is_archived": false, "name": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/labels
GET/repos/{owner}/{repo}/labels/{id}
API accepts requests without authentication+1 moreless
  • Undocumented Content-Type
377

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/labels/{id}`
Response200 OK
{"id":1,"name":"","exclusive":false,"is_archived":false,"color":"00aabb","description":"","url":"http://localhost:3000/api/v1/repos/admin/demo/labels/1"}
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/labels/1

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/labels/-9223372036854775809
GET/repos/{owner}/{repo}/media/{filepath}
API accepts requests without authentication+1 moreless
  • Undocumented Content-Type
331

Undocumented Content-TypeST105

Received: application/json;charset=utf-8
Documented: application/octet-stream
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/0/0/media/0?ref='

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/octet-stream
Response200 OK
<EMPTY>
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/media/0

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/media/{filepath}`
Response200 OK
<EMPTY>
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/media/0
GET/repos/{owner}/{repo}/new_pin_allowed
API accepts requests without authentication+1 moreless
  • Undocumented status code
390

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/new_pin_allowed`
Response200 OK
{"issues":true,"pull_requests":true}
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/new_pin_allowed

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Sudo: P$;4b' -H 'X-GITEA-OTP: p@' -H 'Authorization: P!2"|9$9iYG' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/new_pin_allowed?sudo=%F3%A3%86%93X%3B%F2%B4%9C%AD%C2%96%3C%0B%C3%85-%10&token=gdt_cOVnCMcLyABeu6KFtume2El5OaWoBbO1ti8ujRaMrz5&access_token=%F0%B4%B7%8D'

Undocumented status codeST103

Received: 403
Documented: 200, 404
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'Authorization: P!2"|9$9iYG' -H 'X-GITEA-OTP: p@' -H 'Sudo: P$;4b' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/new_pin_allowed?access_token=&sudo='
GET/repos/{owner}/{repo}/projects
API accepts requests without authentication+1 moreless
  • Schema-violating request accepted
431

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/projects`
Response200 OK
[{"id":124,"title":"%~\u0019,q“0","description":"","owner_id":0,"repo_id":1,"creator":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"1+admin@noreply.localhost","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":false,"prohibit_login":false," // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/projects

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `limit` in query - violates `type` at /properties/limit (was integer, became boolean)
Response200 OK
[{"id":124,"title":"%~\u0019,q“0","description":"","owner_id":0,"repo_id":1,"creator":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":true,"last_login":"1970-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":true,"prohibit_login":false,"location": // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/projects?limit=true'
POST/repos/{owner}/{repo}/projects
Server error on undeclared request Content-Type+1 moreless
  • Schema-valid request rejected
556

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"card_type": "", "description": "", "template_type": "", "title": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/projects

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 5 additional properties not defined in the schema (`Z񖱯䠔¿򄲘`, `q􈾱:`, `wéiC񒞥󏼣񑽁𥪁®‡` and 2 more). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.
Response422 Unprocessable Content
{"message":"invalid card_type \"a\\nb\\rc\\u0085d\\ve\\ff\\u2028g\\u2029h\\r\\ni\" (expected text_only, images_and_text)","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"|4\ud8b4\udc92\\\ud975\udcb6": {"": {"\ud997\ude76+e\u008a": null, "\r\u0094\u00f6\u00aeV\tN\u008e6\u00ffWt\u00ef\f\u00ab\u0005\u00c1": 1.2452438775756477e-18, "\u00de\u009a\u0085": 708}}, "\u00acP<`": {"": [], "e\u0016\u00dd": {}}, "\u0011\u0019Z\ud91b\udc6f\u4814\u00bf\ud9d3\udc98": [null, [], null], "w\u00e9iC\ud909\udfa5\udaff\udf23\ud907\udf41\ud856\ude81\u00ae\u0087": [[true], [1e-05, "\u00ea:"]], "q\udbe3\udfb1:": 1.184898549415321e-211, "title": "%~\u0019,q\u00930", "card_type": "a\nb\rc\u0085d\u000be\ff\u2028g\u2029h\r\ni"}' http://0.0.0.0:41459/api/v1/repos/admin/demo/projects
POST/repos/{owner}/{repo}/projects/{id}/columns/{column_id}/defaultMissing test data
Server error on undeclared request Content-Type+1 moreless
  • Undocumented Content-Type
301

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/repos/0/0/projects/-9223372036854775808/columns/-9223372036854775808/default

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/demo/projects/1/columns/0/default
POST/repos/{owner}/{repo}/projects/{id}/columns/{column_id}/issues/{issue_id}Missing test data
Server error on undeclared request Content-Type+1 moreless
  • Undocumented Content-Type
571

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/repos/0/0/projects/-9223372036854775808/columns/-9223372036854775808/issues/1

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/projects/0/columns/-9223372036854775809/issues/0
POST/repos/{owner}/{repo}/projects/{id}/issues/{issue_id}/moveMissing test data
Server error on undeclared request Content-Type+1 moreless
  • Schema-valid request rejected
326

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"column_id": 0, "sorting": 0}' http://0.0.0.0:41459/api/v1/repos/0/0/projects/-9223372036854775808/issues/1/move

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[ColumnID]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"column_id": 0}' http://0.0.0.0:41459/api/v1/repos/admin/demo/projects/1/issues/2/move
POST/repos/{owner}/{repo}/pullsMissing test data
Server error on undeclared request Content-Type+1 moreless
  • Schema-valid request rejected
650

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"allow_maintainer_edit": false, "assignee": "", "assignees": [], "base": "", "body": "", "due_date": "2000-01-01T00:00:00Z", "head": "", "labels": [], "milestone": 0, "reviewers": [], "team_reviewers": [], "title": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/pulls

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[Head]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/repos/admin/demo/pulls
POST/repos/{owner}/{repo}/pulls/comments/{id}/unresolveMissing test data
Server error on undeclared request Content-Type+1 moreless
  • Undocumented Content-Type
300

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/comments/-9223372036854775808/unresolve

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/comments/-9223372036854775809/unresolve
POST/repos/{owner}/{repo}/pulls/{index}/requested_reviewersMissing test data
Server error on undeclared request Content-Type+1 moreless
  • Undocumented Content-Type
529

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"reviewers": [], "team_reviewers": []}' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/-9223372036854775808/requested_reviewers

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d $'\x00' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/9223372036854775808/requested_reviewers
POST/repos/{owner}/{repo}/pulls/{index}/reviewsMissing test data
Server error on undeclared request Content-Type+1 moreless
  • Undocumented Content-Type
557

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"body": "", "comments": [], "commit_id": "", "event": "APPROVED"}' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/-9223372036854775808/reviews

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/9223372036854775808/reviews
POST/repos/{owner}/{repo}/pulls/{index}/reviews/{id}Missing test data
Server error on undeclared request Content-Type+1 moreless
  • Undocumented Content-Type
551

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"body": "", "event": "APPROVED"}' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/-9223372036854775808/reviews/-9223372036854775808

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d $'\x00' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/-9223372036854775809/reviews/0
POST/repos/{owner}/{repo}/pulls/{index}/reviews/{id}/undismissalsMissing test data
Server error on undeclared request Content-Type+1 moreless
  • Undocumented Content-Type
547

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/-9223372036854775808/reviews/-9223372036854775808/undismissals

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/0.8848883751371465/reviews/0/undismissals
POST/repos/{owner}/{repo}/push_mirrors-sync
Server error on undeclared request Content-Type+1 moreless
  • Missing Content-Type header
308

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/repos/0/0/push_mirrors-sync

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response200 OK
<EMPTY>
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/push_mirrors-sync
GET/repos/{owner}/{repo}/releases
API accepts requests without authentication+1 moreless
  • Schema-violating request accepted
429

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/releases`
Response200 OK
[]
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/releases

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - violates `type` at /properties/page (was integer, became object)
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/releases?page=%C2%83o%F1%BC%99%89%C3%A9%C3%B3%5B%C3%A4%F2%91%B0%BB%F3%95%BF%95%F2%8B%93%8E%C3%96NP%03%C3%B4%C2%AB&page=&page=%02%C3%A4&page=%C2%91%24%C3%A0%C3%A6%C2%A2%C2%A1%F1%A9%92%9A%F1%99%B2%93%F1%92%82%AA%7F%C3%ACx&page=j&page=%10%E6%83%86&draft=true&limit=-46645282'
GET/repos/{owner}/{repo}/releases/{id}/assets
API accepts requests without authentication+1 moreless
  • Undocumented status code
384

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/releases/{id}/assets`
Response200 OK
[{"id":32,"name":"\u000b𐗺R","size":67,"download_count":0,"created_at":"2026-10-19T12:11:07Z","uuid":"ed81115f-3176-4763-9041-2f1d79520dbb","browser_download_url":"http://0.0.0.0:41459/attachments/ed81115f-3176-4763-9041-2f1d79520dbb"},{"id":39,"name":"attachment","size":20,"download_count":0,"created_at":"2026-10-19T12:11:08Z","uuid":"0cff971d-98e0-40bd-a167-8ff638b7fb96","browser_download_url":"http://0.0.0.0:41459/attachments/0cff971d-98e0-40bd-a167-8ff638b7fb96"},{"id":40,"name":"attachment","size":20,"d // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/releases/1/assets

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H $'Authorization: :`T{Mx+\th' -H 'X-GITEA-OTP;' -H 'Sudo: &' 'http://0.0.0.0:41459/api/v1/repos/admin/%C3%B1kh%C3%BFb%1D%F0%9B%98%A5%1E%F2%84%BB%AC/releases/1/assets?access_token=&token=%C3%80%C2%BF%C3%A0%C3%91'
GET/repos/{owner}/{repo}/subscribers
API accepts requests without authentication+1 moreless
  • Schema-violating request accepted
375

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/subscribers`
Response200 OK
[{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"1+admin@noreply.localhost","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0, // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/subscribers

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameters `limit`, `page` in query
  - violates `type` at /properties/limit (was integer, became object)
  - violates `type` at /properties/page (was integer, became string)
Response200 OK
[{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":true,"last_login":"1970-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":true,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/subscribers?limit=C&limit=%F0%9F%8F%BB&limit=8&limit=%F1%A7%B9%B3%C3%9C%13%0D%C2%A3%C3%BA%C2%96%C2%B1+&limit=%F3%B9%94%A8%C2%8E&limit=&limit=%09%F2%A7%85%9E%29%C3%8C%C3%A9&limit=%05y%F1%BD%AD%B6%C3%84%F3%96%A0%AD%F3%96%8F%A6%C2%81%C2%81o%F3%BE%A9%B2W%F3%81%B6%88%F1%AF%A7%A6%C3%ABF%F0%A8%A5%B0%C2%8Ak%F2%BE%8A%96&limit=%C2%A1%F0%B2%B5%84%C2%8C%F1%B9%AF%B7%C2%BC%F0%A3%89%B34%C2%AC&page=%09%C2%BC'
GET/repos/{owner}/{repo}/tags
API accepts requests without authentication+1 moreless
  • Undocumented status code
418

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/tags`
Response200 OK
[]
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/tags

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: ?&Iy1\{ofH]AR' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/tags?limit=524287&access_token=&sudo=%C3%BER%C3%AD%C3%97%1D&page=-237&token=%24C%F1%8D%90%9A%F1%BC%87%8D%F2%8B%BE%9D%C2%B9%F1%BB%86%A6'
GET/repos/{owner}/{repo}/topics
API accepts requests without authentication+1 moreless
  • Undocumented status code
412

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/topics`
Response200 OK
{"topics":["0","c","k"]}
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/topics

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: k7' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/topics?access_token=%C3%B2%C3%99%C2%82%C3%A6%C2%95%0D%C2%84%F2%93%A3%AC%C2%B0P%C3%A2%1D%C2%8Fo%C2%A6t%0C%C2%8DV&limit=-1530561956078846984453928544576208896&sudo=%F2%93%BE%9Bx%10H%C3%92%C2%B0%0C&page=102898082319&token='
POST/repos/{template_owner}/{template_repo}/generateMissing test data
Server error on undeclared request Content-Type+1 moreless
  • Undocumented Content-Type
612

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"avatar": false, "default_branch": "", "description": "", "git_content": false, "git_hooks": false, "labels": false, "name": "", "owner": "", "private": false, "protected_branch": false, "topics": false, "webhooks": false}' http://0.0.0.0:41459/api/v1/repos/0/0/generate

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"": null, "\u0011)E\u00a3u\u0084c\ud9c3\udc00\u008b\u0097": null, "name": "", "owner": "admin"}' http://0.0.0.0:41459/api/v1/repos/0/0/generate
DELETE/teams/{id}
Unexpected response to a request without authentication+1 moreless
  • Missing Content-Type header
104

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/teams/1

Unexpected response to a request without authenticationST401

Expected 401 or 403, got `404 Not Found` for `DELETE /teams/{id}`
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE http://0.0.0.0:41459/api/v1/teams/1

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /topics/search`
Response200 OK
{"topics":[]}
Reproduce
curl -X GET 'http://0.0.0.0:41459/api/v1/topics/search?q=&page=0&limit=0'

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: Missing `q` at query
Response200 OK
{"topics":[]}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/topics/search?page=0&limit=0'
POST/user/emails
Server error on undeclared request Content-Type+1 moreless
  • Schema-valid request rejected
533

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"Email list empty","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"emails": []}' http://0.0.0.0:41459/api/v1/user/emails

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response400 Bad Request
{"message":"email address is invalid: ","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"emails": [""]}' http://0.0.0.0:41459/api/v1/user/emails

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"emails": []}' http://0.0.0.0:41459/api/v1/user/emails
POST/user/gpg_key_verify
Server error on undeclared request Content-Type+1 moreless
  • Schema-valid request rejected
518

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/gpg_key_verify

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/user/gpg_key_verify
POST/user/gpg_keys
Server error on undeclared request Content-Type+1 moreless
  • Schema-valid request rejected
599

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[ArmoredKey]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"armored_public_key": "", "armored_signature": ""}' http://0.0.0.0:41459/api/v1/user/gpg_keys

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"armored_public_key": "", "armored_signature": ""}' http://0.0.0.0:41459/api/v1/user/gpg_keys
POST/user/keys
Server error on undeclared request Content-Type+1 moreless
  • Schema-valid request rejected
573

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[Title]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"key": "", "read_only": false, "title": ""}' http://0.0.0.0:41459/api/v1/user/keys

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"key": "", "read_only": false, "title": ""}' http://0.0.0.0:41459/api/v1/user/keys
POST/user/projects
Server error on undeclared request Content-Type+1 moreless
  • Schema-valid request rejected
535

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[Title]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"card_type": "", "description": "", "template_type": "", "title": ""}' http://0.0.0.0:41459/api/v1/user/projects

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"card_type": "", "description": "", "template_type": "", "title": ""}' http://0.0.0.0:41459/api/v1/user/projects
POST/user/projects/{id}/columns
Server error on undeclared request Content-Type+1 moreless
  • Schema-valid request rejected
536

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[Title]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"color": "", "title": ""}' http://0.0.0.0:41459/api/v1/user/projects/-9223372036854775808/columns

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"color": "", "title": ""}' http://0.0.0.0:41459/api/v1/user/projects/-9223372036854775808/columns
POST/user/projects/{id}/issues/{issue_id}/move
Server error on undeclared request Content-Type+1 moreless
  • Schema-valid request rejected
337

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[ColumnID]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"column_id": 0, "sorting": 0}' http://0.0.0.0:41459/api/v1/user/projects/-9223372036854775808/issues/1/move

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"column_id": 0, "sorting": 0}' http://0.0.0.0:41459/api/v1/user/projects/-9223372036854775808/issues/1/move
GET/version
API accepts requests without authentication+1 moreless
  • Undocumented status code
565

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /version`
Response200 OK
{"version":"28.1.0"}
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/version

Undocumented status codeST103

Received: 401
Documented: 200
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Sudo: &*' -H 'X-GITEA-OTP: IQ' -H 'Authorization: [' 'http://0.0.0.0:41459/api/v1/version?token=%C3%9C%C2%BE%C2%B8a5%C2%80%C3%B3%0F%C3%8D&access_token=%C3%9F%06%F4%8D%87%93%C2%A8%3EY0&sudo=%C2%8B%C2%BFZ%F0%AA%A8%84%C3%BC%09%C2%A1%C3%B9%C2%9A'
POST/admin/actions/runners/registration-tokenServer error on undeclared request Content-Type308

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/admin/actions/runners/registration-token
POST/admin/cron/{task}Missing test dataServer error on undeclared request Content-Type304

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/admin/cron/0
POST/admin/unadopted/{owner}/{repo}Missing test dataServer error on undeclared request Content-Type300

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/admin/unadopted/0/0
GET/gitignore/templatesAPI accepts requests without authentication924

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /gitignore/templates`
Response200 OK
["AL","Actionscript","Ada","Agda","Alteryx","AltiumDesigner","Android","Anjuta","Ansible","AppEngine","AppceleratorTitanium","ArchLinuxPackages","Archives","AtmelStudio","AutoIt","AutomationStudio","Autotools","B4X","Backup","Ballerina","Bazaar","Bazel","Beef","Bitrix","BricxCC","C","C++","CDK","CFWheels","CMake","CUDA","CVS","CakePHP","Calabash","ChefCookbook","Clojure","Cloud9","CodeIgniter","CodeKit","CodeSniffer","CommonLisp","Composer","Concrete5","Coq","Cordova","CraftCMS","D","DM","Dart","DartEditor" // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/gitignore/templates
GET/gitignore/templates/{name}API accepts requests without authentication448

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /gitignore/templates/{name}`
Response200 OK
{"name":"Flutter","source":"# Miscellaneous\n*.class\n*.lock\n*.log\n*.pyc\n*.swp\n.buildlog/\n.history\n\n\n\n# Flutter repo-specific\n/bin/cache/\n/bin/internal/bootstrap.bat\n/bin/internal/bootstrap.sh\n/bin/mingit/\n/dev/benchmarks/mega_gallery/\n/dev/bots/.recipe_deps\n/dev/bots/android_tools/\n/dev/devicelab/ABresults*.json\n/dev/docs/doc/\n/dev/docs/flutter.docs.zip\n/dev/docs/lib/\n/dev/docs/pubspec.yaml\n/dev/integration_tests/**/xcuserdata\n/dev/integration_tests/**/Pods\n/packages/flutter/coverag // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/gitignore/templates/Flutter
GET/label/templatesAPI accepts requests without authentication1,088

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /label/templates`
Response200 OK
["Advanced","Default"]
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/label/templates
GET/label/templates/{name}API accepts requests without authentication303

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /label/templates/{name}`
Response200 OK
[{"name":"bug","exclusive":false,"color":"ee0701","description":"Something is not working"},{"name":"duplicate","exclusive":false,"color":"cccccc","description":"This issue or pull request already exists"},{"name":"enhancement","exclusive":false,"color":"84b6eb","description":"New feature"},{"name":"help wanted","exclusive":false,"color":"128a0c","description":"Need some help"},{"name":"invalid","exclusive":false,"color":"e6e6e6","description":"Something is wrong"},{"name":"question","exclusive":false,"colo // Output truncated...
Reproduce
  1. GET/label/templates
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/label/templates
  2. GET/label/templates/Default
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/label/templates/Default
  3. GET/label/templates/Defaultfailed here
    curl -X GET http://0.0.0.0:41459/api/v1/label/templates/Default
GET/licenses/{name}API accepts requests without authentication523

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /licenses/{name}`
Response200 OK
{"key":"BSD-3-Clause","name":"BSD-3-Clause","url":"http://localhost:3000/api/v1/licenses/BSD-3-Clause","implementation":"Create a text file (typically named LICENSE or LICENSE.txt) in the root of your source code and copy the text of the license into the file","body":"Copyright (c) <year> <owner>. \n\nRedistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:\n\n1. Redistributions of source code must retain the above copyrig // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/licenses/BSD-3-Clause
GET/orgs/{org}API accepts requests without authentication411

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /orgs/{org}`
Response200 OK
{"id":3,"name":"UndefinedContentType","full_name":"","email":"","avatar_url":"http://0.0.0.0:41459/avatars/1f303fd10424e23d36ee4dbd6af13c4d735f75bfe318b1259474fa53863403ba","description":"","website":"","location":"","visibility":"public","repo_admin_change_team_access":false,"username":"UndefinedContentType"}
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/orgs/workbench
POST/packages/{owner}/{type}/{name}/-/link/{repo_name}Missing test dataServer error on undeclared request Content-Type288

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/packages/0/0/demo/-/link/demo
GET/repos/{owner}/{repo}/actions/artifactsAPI accepts requests without authentication399

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/actions/artifacts`
Response200 OK
{"artifacts":[],"total_count":0}
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/actions/artifacts
POST/repos/{owner}/{repo}/actions/runs/{run}/approveMissing test dataServer error on undeclared request Content-Type296

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/repos/0/0/actions/runs/0/approve
GET/repos/{owner}/{repo}/actions/runs/{run}/artifactsAPI accepts requests without authentication392

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/actions/runs/{run}/artifacts`
Response200 OK
{"artifacts":[],"total_count":0}
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/actions/runs/1/artifacts
POST/repos/{owner}/{repo}/actions/runs/{run}/cancelMissing test dataServer error on undeclared request Content-Type298

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/repos/0/0/actions/runs/0/cancel
POST/repos/{owner}/{repo}/actions/runs/{run}/force-cancelMissing test dataServer error on undeclared request Content-Type296

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/repos/0/0/actions/runs/0/force-cancel
POST/repos/{owner}/{repo}/actions/runs/{run}/jobs/{job_id}/rerunMissing test dataServer error on undeclared request Content-Type304

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/repos/0/0/actions/runs/0/jobs/0/rerun
POST/repos/{owner}/{repo}/actions/runs/{run}/rerunMissing test dataServer error on undeclared request Content-Type301

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/repos/0/0/actions/runs/0/rerun
POST/repos/{owner}/{repo}/actions/runs/{run}/rerun-failed-jobsMissing test dataServer error on undeclared request Content-Type298

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/repos/0/0/actions/runs/0/rerun-failed-jobs
POST/repos/{owner}/{repo}/hooks/{id}/testsMissing test dataServer error on undeclared request Content-Type296

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' 'http://0.0.0.0:41459/api/v1/repos/0/0/hooks/-9223372036854775808/tests?ref='
GET/repos/{owner}/{repo}/issue_configAPI accepts requests without authentication394

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/issue_config`
Response200 OK
{"blank_issues_enabled":true,"contact_links":[]}
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/issue_config
GET/repos/{owner}/{repo}/issue_config/validateAPI accepts requests without authentication401

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/issue_config/validate`
Response200 OK
{"valid":true,"message":""}
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/issue_config/validate
GET/repos/{owner}/{repo}/issuesAPI accepts requests without authentication437

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/issues`
Response200 OK
[]
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/issues
GET/repos/{owner}/{repo}/issues/{index}/assetsAPI accepts requests without authentication392

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/issues/{index}/assets`
Response200 OK
[{"id":1,"name":"attachment.png","size":67,"download_count":0,"created_at":"2026-10-19T12:00:26Z","uuid":"7deb61db-2011-4e51-b281-d364479502d4","browser_download_url":"http://0.0.0.0:41459/attachments/7deb61db-2011-4e51-b281-d364479502d4"},{"id":2,"name":"attachment.png","size":67,"download_count":0,"created_at":"2026-10-19T12:00:27Z","uuid":"d2e915a9-0ea4-4a20-b769-c82a78706771","browser_download_url":"http://0.0.0.0:41459/attachments/d2e915a9-0ea4-4a20-b769-c82a78706771"},{"id":3,"name":"attachment.png"," // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/assets
GET/repos/{owner}/{repo}/issues/{index}/labelsAPI accepts requests without authentication388

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/issues/{index}/labels`
Response200 OK
[]
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/labels
GET/repos/{owner}/{repo}/labelsAPI accepts requests without authentication396

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/labels`
Response200 OK
[{"id":1,"name":"","exclusive":false,"is_archived":false,"color":"00aabb","description":"","url":"http://localhost:3000/api/v1/repos/admin/demo/labels/1"},{"id":55,"name":"\u000b󱜤«􏊣¼","exclusive":false,"is_archived":false,"color":"00aabb","description":"","url":"http://localhost:3000/api/v1/repos/admin/demo/labels/55"},{"id":56,"name":"\u000b󱜤«􏊣¼","exclusive":false,"is_archived":false,"color":"00aabb","description":"","url":"http://localhost:3000/api/v1/repos/admin/demo/labels/56"},{"id":59,"name":"BSD-3-Cl // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/labels
GET/repos/{owner}/{repo}/languagesAPI accepts requests without authentication389

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/languages`
Response200 OK
{}
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/languages
GET/repos/{owner}/{repo}/licensesAPI accepts requests without authentication397

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/licenses`
Response200 OK
[]
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/licenses
GET/repos/{owner}/{repo}/projects/{id}API accepts requests without authentication326

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/projects/{id}`
Response200 OK
{"id":107,"title":"First issue","description":"","owner_id":0,"repo_id":1,"creator":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"1+admin@noreply.localhost","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":false,"prohibit_login":false,"lo // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/projects/107
POST/repos/{owner}/{repo}/pulls/comments/{id}/resolveMissing test dataServer error on undeclared request Content-Type300

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/comments/-9223372036854775808/resolve
GET/repos/{owner}/{repo}/pulls/pinnedAPI accepts requests without authentication393

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/pulls/pinned`
Response200 OK
[]
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/pulls/pinned
POST/repos/{owner}/{repo}/pulls/{index}/updateMissing test dataServer error on undeclared request Content-Type322

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' 'http://0.0.0.0:41459/api/v1/repos/0/0/pulls/-9223372036854775808/update?style=merge'
GET/repos/{owner}/{repo}/releases/{id}API accepts requests without authentication381

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/releases/{id}`
Response200 OK
{"id":1,"tag_name":"<¸°","target_commitish":"main","name":"","body":"","url":"http://localhost:3000/api/v1/repos/admin/demo/releases/1","html_url":"http://localhost:3000/admin/demo/releases/tag/%3C%C2%B8%C2%B0","tarball_url":"http://localhost:3000/admin/demo/archive/%3C%C2%B8%C2%B0.tar.gz","zipball_url":"http://localhost:3000/admin/demo/archive/%3C%C2%B8%C2%B0.zip","upload_url":"http://localhost:3000/api/v1/repos/admin/demo/releases/1/assets","draft":false,"prerelease":false,"created_at":"2026-10-19T12:05:0 // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/releases/1
GET/repos/{owner}/{repo}/stargazersAPI accepts requests without authentication409

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /repos/{owner}/{repo}/stargazers`
Response200 OK
[{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"1+admin@noreply.localhost","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0, // Output truncated...
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/repos/admin/demo/stargazers
POST/repos/{owner}/{repo}/transferMissing test dataServer error on undeclared request Content-Type618

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' -d '{"new_owner": "", "team_ids": []}' http://0.0.0.0:41459/api/v1/repos/0/0/transfer
POST/repos/{owner}/{repo}/transfer/acceptMissing test dataServer error on undeclared request Content-Type503

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/repos/0/0/transfer/accept
POST/repos/{owner}/{repo}/transfer/rejectMissing test dataServer error on undeclared request Content-Type523

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/repos/0/0/transfer/reject
GET/settings/apiAPI accepts requests without authentication596

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /settings/api`
Response200 OK
{"max_response_items":50,"default_paging_num":30,"default_git_trees_per_page":1000,"default_max_blob_size":10485760,"default_max_response_size":104857600}
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/settings/api
GET/settings/attachmentAPI accepts requests without authentication592

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /settings/attachment`
Response200 OK
{"enabled":true,"allowed_types":".avif,.cpuprofile,.csv,.dmp,.docx,.fodg,.fodp,.fods,.fodt,.gif,.gz,.jpeg,.jpg,.json,.jsonc,.log,.md,.mov,.mp4,.odf,.odg,.odp,.ods,.odt,.patch,.pdf,.png,.pptx,.svg,.tgz,.txt,.webm,.webp,.xls,.xlsx,.zip","max_size":100,"max_files":5}
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/settings/attachment
GET/settings/repositoryAPI accepts requests without authentication596

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /settings/repository`
Response200 OK
{"mirrors_disabled":false,"http_git_disabled":false,"migrations_disabled":false,"stars_disabled":false,"time_tracking_disabled":false,"lfs_disabled":true}
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/settings/repository
GET/settings/uiAPI accepts requests without authentication594

API accepts requests without authenticationST401

Expected 401 or 403, got `200 OK` for `GET /settings/ui`
Response200 OK
{"default_theme":"gitea-auto","allowed_reactions":["+1","-1","laugh","hooray","confused","heart","rocket","eyes"],"custom_emojis":["git","gitea","codeberg","gitlab","github","gogs"]}
Reproduce
curl -X GET http://0.0.0.0:41459/api/v1/settings/ui
POST/user/actions/runners/registration-tokenServer error on undeclared request Content-Type309

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/user/actions/runners/registration-token
POST/user/projects/{id}/columns/{column_id}/issues/{issue_id}Missing test dataServer error on undeclared request Content-Type567

Server error on undeclared request Content-TypeST102

`Content-Type: multipart/form-data` without a boundary returned 500, expected 400 Bad Request or 415 Unsupported Media Type

Reject a malformed `Content-Type` before parsing the request body
Response500 Internal Server Error
failed to parse request multipart form
Reproduce
curl -X POST -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: multipart/form-data' http://0.0.0.0:41459/api/v1/user/projects/-9223372036854775808/columns/-9223372036854775808/issues/1
PATCH/admin/users/{username}
Response violates schema+3 moreless
  • Schema-valid request rejected
  • Undocumented Content-Type
  • Undocumented status code
474

Undocumented status codeST103

Received: 404
Documented: 200, 400, 403, 409, 422
Response404 Not Found
{"message":"user redirect does not exist [name: 0]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"active": false, "admin": false, "allow_create_organization": false, "allow_git_hook": false, "allow_import_local": false, "description": "", "email": "0@0.com", "full_name": "", "location": "", "login_name": "", "max_repo_creation": 0, "must_change_password": false, "password": "", "prohibit_login": false, "restricted": false, "source_id": 0, "type": "User", "visibility": "public", "website": ""}' http://0.0.0.0:41459/api/v1/admin/users/0

Response violates schemaST108

"" is not a "email"

Validated against the response schema for status code 200.

Schema at /properties/email:

    {
        "format": "email",
        "type": "string",
        "x-go-name": "Email"
    }

Value:

    ""
Response200 OK
{"id":4,"login":"workbench-user","type":"Organization","login_name":"","source_id":0,"full_name":"ÿ\u001c‘","email":"","avatar_url":"http://0.0.0.0:41459/avatars/fa25ceee0d7be94b95c0208f7456232d4e85b901ba9bb49d8219ba29e2313dc7","html_url":"http://0.0.0.0:41459/workbench-user","language":"","is_admin":false,"last_login":"1970-01-01T00:00:00Z","created":"2026-10-19T11:59:28Z","restricted":false,"active":true,"prohibit_login":false,"location":"","website":"","description":"€򰸁\u001d􊧿\\9¼ŸKêFIÞ\u0019\u0007{񵦹񢙒"," // Output truncated...
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"source_id": 0, "login_name": ""}' http://0.0.0.0:41459/api/v1/admin/users/workbench-user

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response400 Bad Request
{"message":"user workbench-user is an organization","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"allow_import_local": false, "type": "Bot", "visibility": "public", "admin": false, "email": "9fg6'"'"'z'"'"'?ox@8ydxz.test", "source_id": 0, "login_name": ""}' http://0.0.0.0:41459/api/v1/admin/users/workbench-user

Undocumented status codeST103

Received: 401
Documented: 200, 400, 403, 409, 422
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: 2' -H 'Content-Type: application/json' -d '{"\u00e6\u0153\u00c6\u0152\ufb00\u02a4\u02a8\u00df": null, "\u00a1": {}, "\ud865\udeb6\u00b5\u001es\ud9fa\udcf2\u00ccF-N\u00fb\u00f3=^\u0014w\u0018\\": {"categories": null}, "n\u00b1\u00b9\u00d9\\\u009d\u0086\u00db\u00d5\udaae\udd87-\udbf3\udc82\u00a4@l\u00b0\ud8f2\ude8c\u00eb\uda9f\udc92n]\u00ef\u00dc;": [], "active": true, "location": "o\u0015$\udadb\udf73", "prohibit_login": false, "allow_import_local": true, "source_id": 0, "login_name": "", "restricted": false, "full_name": "admin/archive_cleanup", "description": "\u0080\uda83\ude01\u001d\udbea\uddff\\9\u00bc\u009fK\u00eaFI\u00de\u0019\u0007{\ud996\uddb9\ud949\ude52", "email": "1n3u5j+'"'"'8a@e9d3913.org", "allow_create_organization": false, "password": "\u009d\u0080DS", "visibility": "private", "type": "Organization", "allow_git_hook": false, "admin": true, "website": "", "must_change_password": true, "max_repo_creation": -864}' 'http://0.0.0.0:41459/api/v1/admin/users/workbench-user?sudo=%F2%90%A7%91%C2%B6%C2%81&access_token=%F2%9E%BC%83Da&token=%F3%A4%9F%85%C2%A6%C3%90'

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
  1. GET/user/emails
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/emails
  2. PATCH/admin/users/0failed here
    curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"source_id": 5529719496, "login_name": ""}' http://0.0.0.0:41459/api/v1/admin/users/0

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 3 additional properties not defined in the schema (`ˆ`, `þA–œ\`, `󖒱œ`). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.
Response422 Unprocessable Content
{"message":"[Website]: Url","url":"http://localhost:3000/api/swagger"}
Reproduce
  1. GET/repos/issues/search
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/issues/search
  2. PATCH/admin/users/workbench-userfailed here
    curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\u0088": [[], {}, [null, false, 2822738686494315]], "\u00feA\u0096\u009c\\": {}, "\udb19\udcb1\u009c": {"\u00f5\u00b8V\u0095\u00b2\u00e3\ud813\udd5d\u0089\u00a2": {}, "": {}, "\u00ff\u0088\udaaa\ude51\uda81\udcf3\u00e0": ""}, "must_change_password": true, "location": "", "admin": true, "website": "\ud83c\udffb", "login_name": "", "type": "User", "full_name": "\u00dc", "description": "<", "allow_git_hook": true, "email": "rw'"'"'j%@n60bhcyb.com", "prohibit_login": true, "active": true, "restricted": false, "source_id": 616, "visibility": "limited", "allow_create_organization": false, "password": "\u000f", "max_repo_creation": 2698439202312839, "allow_import_local": true}' http://0.0.0.0:41459/api/v1/admin/users/workbench-user
PATCH/teams/{id}
Response violates schema+3 moreless
  • Schema-valid request rejected
  • Schema-violating request accepted
  • Undocumented status code
344

Response violates schemaST108

null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/Organization:

    {
        "type": "object",
        "description": "Organization represents an organization",
        "properties": {
            "avatar_url": {
                "description": "The URL of the organization's avatar",
                "type": "string",
                "x-go-name": "AvatarURL"
            },
            "description": {
                "description": "The description of the organization",
                "type": "string",
                "x-go-name": "Description"
            },
            "email": {
                "description": "The email address of the organization",
                "type": "string",
                "x-go-name": "Email"
            },
        // Output truncated...
    }

Value:

    null
Response200 OK
{"id":1,"name":"Owners","description":"","organization":null,"includes_all_repositories":true,"permission":"owner","units":["repo.issues","repo.pulls","repo.wiki","repo.ext_wiki","repo.ext_issues","repo.packages","repo.actions","repo.code","repo.releases","repo.projects"],"units_map":{"repo.releases":"owner","repo.ext_issues":"read","repo.projects":"owner","repo.code":"owner","repo.issues":"owner","repo.pulls":"owner","repo.wiki":"owner","repo.ext_wiki":"read","repo.packages":"owner","repo.actions":"owner"} // Output truncated...
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"units": ["repo.code", "repo.issues", "repo.ext_issues", "repo.wiki", "repo.pulls", "repo.releases", "repo.projects", "repo.ext_wiki"], "units_map": {"repo.code": "read", "repo.ext_issues": "none", "repo.ext_wiki": "none", "repo.issues": "write", "repo.projects": "none", "repo.pulls": "owner", "repo.releases": "none", "repo.wiki": "admin"}, "can_create_org_repo": false, "description": "", "includes_all_repositories": false, "name": "", "permission": "read", "visibility": "public"}' http://0.0.0.0:41459/api/v1/teams/1

Undocumented status codeST103

Received: 422
Documented: 200, 404
Response422 Unprocessable Content
{"message":"[Visibility]: In","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"can_create_org_repo": false, "description": "", "includes_all_repositories": false, "name": "Owners", "permission": "read", "units": ["repo.code", "repo.issues", "repo.ext_issues", "repo.wiki", "repo.pulls", "repo.releases", "repo.projects", "repo.ext_wiki"], "units_map": {"repo.code": "read", "repo.ext_issues": "none", "repo.ext_wiki": "none", "repo.issues": "write", "repo.projects": "none", "repo.pulls": "owner", "repo.releases": "none", "repo.wiki": "admin"}, "visibility": "AAA"}' http://0.0.0.0:41459/api/v1/teams/1

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: in body - visibility: Incorrect type
Response200 OK
{"id":1,"name":"Owners","description":"","organization":null,"includes_all_repositories":true,"permission":"owner","units":["repo.projects","repo.packages","repo.actions","repo.code","repo.issues","repo.pulls","repo.releases","repo.wiki","repo.ext_issues","repo.ext_wiki"],"units_map":{"repo.wiki":"owner","repo.ext_wiki":"read","repo.ext_issues":"read","repo.projects":"owner","repo.code":"owner","repo.packages":"owner","repo.actions":"owner","repo.issues":"owner","repo.pulls":"owner","repo.releases":"owner"} // Output truncated...
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"can_create_org_repo": false, "description": "", "includes_all_repositories": false, "name": "Owners", "permission": "read", "units": ["repo.code", "repo.issues", "repo.ext_issues", "repo.wiki", "repo.pulls", "repo.releases", "repo.projects", "repo.ext_wiki"], "units_map": {"repo.code": "read", "repo.ext_issues": "none", "repo.ext_wiki": "none", "repo.issues": "write", "repo.projects": "none", "repo.pulls": "owner", "repo.releases": "none", "repo.wiki": "admin"}, "visibility": null}' http://0.0.0.0:41459/api/v1/teams/1

Response violates schemaST1082 violations

null is not of type "array"

Validated against the response schema for status code 200.

Schema at /definitions/Team/properties/units:

    {
        "type": "array",
        "description": "Deprecated: This variable should be replaced by UnitsMap ...
        "items": {
            "type": "string"
        },
        "x-deprecated": true,
        "x-go-name": "Units",
        "example": [
            "repo.code",
            "repo.issues",
            "repo.ext_issues",
            "repo.wiki",
            "repo.pulls",
            "repo.releases",
            "repo.projects",
            "repo.ext_wiki"
        ]
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/Team/properties/units_map:

    {
        "type": "object",
        "additionalProperties": {
            "type": "string"
        },
        "x-go-name": "UnitsMap",
        "example": {
            "repo.code": "read",
            "repo.ext_issues": "none",
            "repo.ext_wiki": "none",
            "repo.issues": "write",
            "repo.projects": "none",
            "repo.pulls": "owner",
            "repo.releases": "none",
            "repo.wiki": "admin"
        }
    }

Value:

    null
Response200 OK
{"id":18,"name":"BSD-3-Clause","description":" \u001e","organization":null,"includes_all_repositories":true,"permission":"read","units":null,"units_map":null,"can_create_org_repo":false,"visibility":"public"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"name": ""}' http://0.0.0.0:41459/api/v1/teams/18

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 400
Documented: 200, 404
Response400 Bad Request
{"message":"only one of units or units_map can be set","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"hJ\u001e\u0099\u00b6\u00ce": [-1723590489380039.0], "": [], "\u0003+\u00bc\uda5b\udc11|x": true, "\ud845\udd6a\ud894\ude88\ud9b8\udf92\ud944\ude3b\ud978\uddc2": [], "R\u0086\u23e5\u00e2\u00c7b\u00f7": "\u00af", "name": "workbench-user", "units_map": {"\ud878\udc9d": "\ud8f8\udd3d ", "7)\ud99e\udd49\u009fxFB\u00ca\u0004\u009e\u000f\u0002": "\u00a2\u00eeh\udaa1\udf6a", "Scunthorpe": "\u00fagl\u00b6\u00e6o\u00ccU?\u00f0\u009a", "\u00ed": "[\ud937\udc80\u00fe\u009b\u00bd\u00b9", "": "\u0e01\u0e32"}, "permission": "admin", "units": ["\uda6a\udd57^C", "", "\u00e1\u00ac\udaf7\ude3a[\u009c", "\u001a\u00b2", "\udb5f\udf10\u00deS\u00fa\u0080\u00d2\u00fa", "\n\u00ab\u00c1", "\u00d5\u008d\u0013\u0018\u00a0\u00b4", "undefined", "", ";e\u00a0\ud9ec\udcf8\u0085\u00f3\u0081\u00b3Mh\u00fa\u008a\u00eeC\u00c6\udbdb\udd47\u00cd\u00f9", "AllowHeaderMismatch", "\udb22\udfe7I\u00a8\u38ea\u00eb\u00e80\udbb3\udfe5\u009f", "", "~\uda91\udfde\u00b6\u00e9O\uda42\udf82x0\u007f", "\ud93c\udf4f\u009b\uda43\udce4\u0089o\uda0a\uddc0\u00b3\ud885\udf50\u001c", "+\u001c\u007fNQ1G\udab0\udc4f3[\u00ec", "\t\u0096/\u0306", "\u00ff", "\u0088\u0097\u008b", "Other"], "description": "\u0007\uae16\uda06\udfcf\u00d4\u0000\u00da"}' http://0.0.0.0:41459/api/v1/teams/18
GET/user/subscriptions
Response violates schema+2 moreless
  • Schema-violating request accepted
  • Undocumented status code
481

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
[{"id":1,"owner":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_c // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/subscriptions?page=null&page=null'

Undocumented status codeST103

Received: 403
Documented: 200
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'Authorization: 68#2|' -H 'X-GITEA-OTP: XzwUte' -H 'Sudo: 4' http://0.0.0.0:41459/api/v1/user/subscriptions

Response violates schemaST108

"" is not a "email"

Validated against the response schema for status code 200.

Schema at /definitions/User/properties/email:

    {
        "format": "email",
        "type": "string",
        "x-go-name": "Email"
    }

Value:

    ""
Response200 OK
[{"id":2,"owner":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":false,"prohibit_login":false,"location":"o\u0015$󆽳","website":"","description":"񶞪","visibility":"public","f // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/subscriptions?page=-65419'
GET/user/times
Response violates schema+2 moreless
  • Schema-violating request accepted
  • Undocumented status code
608

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `since` in query - since: Value not matching the 'date-time' format
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/times?since='

Undocumented status codeST103

Received: 422
Documented: 200
Response422 Unprocessable Content
{"message":"parsing time \"null\" as \"2006-01-02T15:04:05Z07:00\": cannot parse \"null\" as \"2006\"","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/times?since=null&since=null'

Response violates schemaST1087 violations

null is not of type "array"

Validated against the response schema for status code 200.

Schema at /definitions/Issue/properties/assignees:

    {
        "type": "array",
        "items": {
            "$ref": "#/components/schemas/User"
        },
        "x-go-name": "Assignees"
    }

Value:

    null
null is not of type "array"

Validated against the response schema for status code 200.

Schema at /definitions/Issue/properties/projects:

    {
        "type": "array",
        "items": {
            "$ref": "#/components/schemas/Project"
        },
        "x-go-name": "Projects"
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/Milestone:

    {
        "type": "object",
        "description": "Milestone milestone is a collection of issues on one repo...
        "properties": {
            "closed_at": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Closed"
            },
            "closed_issues": {
                "description": "ClosedIssues is the number of closed issues in th...
                "type": "integer",
                "format": "int64",
                "x-go-name": "ClosedIssues"
            },
            "created_at": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Created"
        // Output truncated...
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/PullRequestMeta:

    {
        "type": "object",
        "description": "PullRequestMeta PR info if an issue is a PR",
        "properties": {
            "draft": {
                "type": "boolean",
                "x-go-name": "IsWorkInProgress"
            },
            "html_url": {
                "type": "string",
                "x-go-name": "HTMLURL"
            },
            "merged": {
                "type": "boolean",
                "x-go-name": "HasMerged"
            },
            "merged_at": {
                "type": "string",
                "format": "date-time",
        // Output truncated...
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/User:

    {
        "type": "object",
        "description": "User represents a user",
        "properties": {
            "active": {
                "description": "Is user active",
                "type": "boolean",
                "x-go-name": "IsActive"
            },
            "avatar_url": {
                "description": "URL to the user's avatar",
                "type": "string",
                "x-go-name": "AvatarURL"
            },
            "created": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Created"
            },
        // Output truncated...
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/Issue/properties/closed_at:

    {
        "type": "string",
        "format": "date-time",
        "x-go-name": "Closed"
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/Issue/properties/due_date:

    {
        "type": "string",
        "format": "date-time",
        "x-go-name": "Deadline"
    }

Value:

    null
Response200 OK
[{"id":1,"created":"2026-10-19T12:00:50Z","time":2,"user_id":1,"user_name":"admin","issue_id":1,"issue":{"id":1,"url":"http://localhost:3000/api/v1/repos/admin/demo/issues/1","html_url":"http://0.0.0.0:41459/admin/demo/issues/1","number":1,"user":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","lang // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/times
GET/users/{username}/subscriptions
Response violates schema+2 moreless
  • Schema-violating request accepted
  • Undocumented Content-Type
370

Response violates schemaST108

"" is not a "email"

Validated against the response schema for status code 200.

Schema at /definitions/User/properties/email:

    {
        "format": "email",
        "type": "string",
        "x-go-name": "Email"
    }

Value:

    ""
Response200 OK
[{"id":2,"owner":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":false,"prohibit_login":false,"location":"o\u0015$󆽳","website":"","description":"񶞪","visibility":"public","f // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/users/admin/subscriptions

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - violates `type` at /properties/page (was integer, became array)
Response200 OK
[{"id":2,"owner":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":false,"prohibit_login":false,"location":"o\u0015$󆽳","website":"","description":"񶞪","visibility":"public","f // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/users/admin/subscriptions?limit=-4294967296&page=null&page=%7B%7D&page=%5B%5D&page=-0.3333333333333333&page=%5B%5D&page=%5B%5D&page=%5B262144%2C+%7B%27%27%3A+%27%5CU000b0c6b%5Cx8a%5CU000b3720H%27%2C+%27%C2%B3%5C%5C%C3%B9%27%3A+%27true%27%2C+%27%C3%BA%5CU0005d78b%5Cx87%3E%C2%BA%5Cx94%C3%A6%F0%AC%98%99%3C%5Cx7f-%C3%ABK%5CU00092787%EB%85%A3j%5Cxad%C3%AF%5CU000df7e94%5Cxad%C3%AA%5CU00088debs%C3%9C%27%3A+-6861764749716020.0%7D%5D'

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
  1. GET/admin/emails/search
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/admin/emails/search?limit=2359&q=%F3%88%90%95%F2%85%BD%B5%C2%AA%F1%A4%B7%8F%F0%A7%B9%9B%F1%9C%A6%91%C3%AD%C2%93&page=284'
  2. GET/users/workbench/subscriptionsfailed here
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/users/workbench/subscriptions
GET/orgs/{org}/members
Response violates schema+1 moreless
  • Schema-violating request accepted
267

Response violates schemaST108

"" is not a "email"

Validated against the response schema for status code 200.

Schema at /definitions/User/properties/email:

    {
        "format": "email",
        "type": "string",
        "x-go-name": "Email"
    }

Value:

    ""
Response200 OK
[{"id":4,"login":"workbench-user","type":"Organization","login_name":"","source_id":0,"full_name":"ÿ\u001c‘","email":"","avatar_url":"http://0.0.0.0:41459/avatars/fa25ceee0d7be94b95c0208f7456232d4e85b901ba9bb49d8219ba29e2313dc7","html_url":"http://0.0.0.0:41459/workbench-user","language":"","is_admin":true,"last_login":"1970-01-01T00:00:00Z","created":"2026-10-19T11:59:28Z","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"€򰸁\u001d􊧿\\9¼ŸKêFIÞ\u0019\u0007{񵦹񢙒", // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/members

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - violates `type` at /properties/page (was integer, became object)
Response200 OK
[{"id":4,"login":"workbench-user","type":"Organization","login_name":"","source_id":0,"full_name":"ÿ\u001c‘","email":"","avatar_url":"http://0.0.0.0:41459/avatars/fa25ceee0d7be94b95c0208f7456232d4e85b901ba9bb49d8219ba29e2313dc7","html_url":"http://0.0.0.0:41459/workbench-user","language":"","is_admin":true,"last_login":"1970-01-01T00:00:00Z","created":"2026-10-19T11:59:28Z","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"€򰸁\u001d􊧿\\9¼ŸKêFIÞ\u0019\u0007{񵦹񢙒", // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/orgs/workbench/members?page=%5E%F2%A5%AF%A4%F0%A0%98%B6%04%F3%99%BF%A3%C2%84%C2%BB%C3%B9%C3%994%C3%9C%C3%A5%C3%8E%C3%A4%7F&limit=49'
GET/orgs/{org}/teams
Response violates schema+1 moreless
  • Schema-violating request accepted
239

Response violates schemaST108

null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/Organization:

    {
        "type": "object",
        "description": "Organization represents an organization",
        "properties": {
            "avatar_url": {
                "description": "The URL of the organization's avatar",
                "type": "string",
                "x-go-name": "AvatarURL"
            },
            "description": {
                "description": "The description of the organization",
                "type": "string",
                "x-go-name": "Description"
            },
            "email": {
                "description": "The email address of the organization",
                "type": "string",
                "x-go-name": "Email"
            },
        // Output truncated...
    }

Value:

    null
Response200 OK
[{"id":7,"name":"0BSD","description":"","organization":null,"includes_all_repositories":false,"permission":"none","units":[""],"units_map":{"":"none"},"can_create_org_repo":false,"visibility":"private"},{"id":12,"name":"AGPL-3.0","description":"","organization":null,"includes_all_repositories":false,"permission":"none","units":[""],"units_map":{"":"none"},"can_create_org_repo":false,"visibility":"private"},{"id":8,"name":"BSD-3-Clause-Clear","description":"","organization":null,"includes_all_repositories":f // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/teams

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameters `limit`, `page` in query
  - violates `type` at /properties/limit (was integer, became string)
  - violates `type` at /properties/page (was integer, became null)
Response200 OK
[{"id":7,"name":"0BSD","description":"","organization":null,"includes_all_repositories":false,"permission":"none","units":[""],"units_map":{"":"none"},"can_create_org_repo":false,"visibility":"private"},{"id":12,"name":"AGPL-3.0","description":"","organization":null,"includes_all_repositories":false,"permission":"none","units":[""],"units_map":{"":"none"},"can_create_org_repo":false,"visibility":"private"},{"id":8,"name":"BSD-3-Clause-Clear","description":"","organization":null,"includes_all_repositories":f // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/orgs/workbench/teams?limit=&page=null'

Response violates schemaST1082 violations

null is not of type "array"

Validated against the response schema for status code 200.

Schema at /definitions/Team/properties/units:

    {
        "type": "array",
        "description": "Deprecated: This variable should be replaced by UnitsMap ...
        "items": {
            "type": "string"
        },
        "x-deprecated": true,
        "x-go-name": "Units",
        "example": [
            "repo.code",
            "repo.issues",
            "repo.ext_issues",
            "repo.wiki",
            "repo.pulls",
            "repo.releases",
            "repo.projects",
            "repo.ext_wiki"
        ]
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/Team/properties/units_map:

    {
        "type": "object",
        "additionalProperties": {
            "type": "string"
        },
        "x-go-name": "UnitsMap",
        "example": {
            "repo.code": "read",
            "repo.ext_issues": "none",
            "repo.ext_wiki": "none",
            "repo.issues": "write",
            "repo.projects": "none",
            "repo.pulls": "owner",
            "repo.releases": "none",
            "repo.wiki": "admin"
        }
    }

Value:

    null
Response200 OK
[{"id":18,"name":"BSD-3-Clause","description":" \u001e","organization":null,"includes_all_repositories":true,"permission":"read","units":null,"units_map":null,"can_create_org_repo":false,"visibility":"public"}]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/teams

Response violates schemaST108

null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/Organization:

    {
        "type": "object",
        "description": "Organization represents an organization",
        "properties": {
            "avatar_url": {
                "description": "The URL of the organization's avatar",
                "type": "string",
                "x-go-name": "AvatarURL"
            },
            "description": {
                "description": "The description of the organization",
                "type": "string",
                "x-go-name": "Description"
            },
            "email": {
                "description": "The email address of the organization",
                "type": "string",
                "x-go-name": "Email"
            },
        // Output truncated...
    }

Value:

    null
Response200 OK
{"data":[{"id":7,"name":"0BSD","description":"","organization":null,"includes_all_repositories":false,"permission":"none","units":[""],"units_map":{"":"none"},"can_create_org_repo":false,"visibility":"private"},{"id":12,"name":"AGPL-3.0","description":"","organization":null,"includes_all_repositories":false,"permission":"none","units":[""],"units_map":{"":"none"},"can_create_org_repo":false,"visibility":"private"},{"id":8,"name":"BSD-3-Clause-Clear","description":"","organization":null,"includes_all_reposit // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/teams/search

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `limit` in query - violates `type` at /properties/limit (was integer, became string)
Response200 OK
{"ok":true,"data":[{"id":13,"name":"Owners","description":"","organization":null,"includes_all_repositories":true,"permission":"owner","units":["repo.code","repo.issues","repo.releases","repo.ext_wiki","repo.packages","repo.actions","repo.pulls","repo.wiki","repo.ext_issues","repo.projects"],"units_map":{"repo.wiki":"owner","repo.ext_wiki":"read","repo.ext_issues":"read","repo.projects":"owner","repo.packages":"owner","repo.pulls":"owner","repo.releases":"owner","repo.actions":"owner","repo.code":"owner","r // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/orgs/workbench/teams/search?q=&page=-5755&limit=%C2%96%0E%11%C3%83%C2%93&include_desc=false'

Response violates schemaST1082 violations

null is not of type "array"

Validated against the response schema for status code 200.

Schema at /definitions/Team/properties/units:

    {
        "type": "array",
        "description": "Deprecated: This variable should be replaced by UnitsMap ...
        "items": {
            "type": "string"
        },
        "x-deprecated": true,
        "x-go-name": "Units",
        "example": [
            "repo.code",
            "repo.issues",
            "repo.ext_issues",
            "repo.wiki",
            "repo.pulls",
            "repo.releases",
            "repo.projects",
            "repo.ext_wiki"
        ]
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/Team/properties/units_map:

    {
        "type": "object",
        "additionalProperties": {
            "type": "string"
        },
        "x-go-name": "UnitsMap",
        "example": {
            "repo.code": "read",
            "repo.ext_issues": "none",
            "repo.ext_wiki": "none",
            "repo.issues": "write",
            "repo.projects": "none",
            "repo.pulls": "owner",
            "repo.releases": "none",
            "repo.wiki": "admin"
        }
    }

Value:

    null
Response200 OK
{"data":[{"id":18,"name":"BSD-3-Clause","description":" \u001e","organization":null,"includes_all_repositories":true,"permission":"read","units":null,"units_map":null,"can_create_org_repo":false,"visibility":"public"}],"ok":true}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/teams/search
PATCH/repos/{owner}/{repo}/branch_protections/{name}
Response violates schema+1 moreless
  • Schema-violating request accepted
610

Response violates schemaST108

null is not of type "array"

Validated against the response schema for status code 200.

Schema at /properties/status_check_contexts:

    {
        "type": "array",
        "items": {
            "type": "string"
        },
        "x-go-name": "StatusCheckContexts"
    }

Value:

    null
Response200 OK
{"branch_name":"񅼢î'a§Q»","rule_name":"񅼢î'a§Q»","priority":2,"enable_push":false,"enable_push_whitelist":false,"push_whitelist_usernames":[],"push_whitelist_teams":[],"push_whitelist_deploy_keys":false,"enable_force_push":false,"enable_force_push_allowlist":false,"force_push_allowlist_usernames":[],"force_push_allowlist_teams":[],"force_push_allowlist_deploy_keys":false,"enable_merge_whitelist":false,"merge_whitelist_usernames":[],"merge_whitelist_teams":[],"enable_bypass_allowlist":false,"bypass_allowlist_u // Output truncated...
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/repos/admin/demo/branch_protections/%F1%85%BC%A2%C3%AE%27a%C2%A7Q%C2%BB

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: in body - invalid syntax: random bytes
Response200 OK
{"branch_name":"񅼢î'a§Q»","rule_name":"񅼢î'a§Q»","priority":2,"enable_push":false,"enable_push_whitelist":false,"push_whitelist_usernames":[],"push_whitelist_teams":[],"push_whitelist_deploy_keys":false,"enable_force_push":false,"enable_force_push_allowlist":false,"force_push_allowlist_usernames":[],"force_push_allowlist_teams":[],"force_push_allowlist_deploy_keys":false,"enable_merge_whitelist":false,"merge_whitelist_usernames":[],"merge_whitelist_teams":[],"enable_bypass_allowlist":false,"bypass_allowlist_u // Output truncated...
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d $'\x00' http://0.0.0.0:41459/api/v1/repos/admin/demo/branch_protections/%F1%85%BC%A2%C3%AE%27a%C2%A7Q%C2%BB
PUT/repos/{owner}/{repo}/contents/{filepath}
Response violates schema+1 moreless
  • Schema-valid request rejected
393

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"repository file already exists [path: 0]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"content": ""}' http://0.0.0.0:41459/api/v1/repos/admin/demo/contents/0

Response violates schemaST1083 violations

null is not of type "object"

Validated against the response schema for status code 201.

Schema at /definitions/PayloadUser:

    {
        "type": "object",
        "description": "PayloadUser represents the author or committer of a commit",
        "properties": {
            "email": {
                "type": "string",
                "format": "email",
                "x-go-name": "Email"
            },
            "name": {
                "description": "Full name of the commit author",
                "type": "string",
                "x-go-name": "Name"
            },
            "username": {
                "description": "username of the user",
                "type": "string",
                "x-go-name": "UserName"
            }
        // Output truncated...
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 201.

Schema at /definitions/ContentsResponse/properties/submodule_git_url:

    {
        "type": "string",
        "description": "`submodule_git_url` is populated when `type` is `submodul...
        "x-go-name": "SubmoduleGitURL"
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 201.

Schema at /definitions/ContentsResponse/properties/target:

    {
        "type": "string",
        "description": "`target` is populated when `type` is `symlink`, otherwise...
        "x-go-name": "Target"
    }

Value:

    null
Response201 Created
{"content":{"name":"ȗ","path":"ȗ","sha":"e69de29bb2d1d6434b8b29ae775ad8c2e48c5391","last_commit_sha":"ff5538e8cec4259c1531cf3a3559046bc587e11a","last_committer_date":"2026-10-19T12:08:42Z","last_author_date":"2026-10-19T12:08:42Z","type":"file","mode":"100644","size":0,"encoding":"base64","content":"","target":null,"url":"http://localhost:3000/api/v1/repos/admin/demo/contents/%C3%88%C2%97?ref=main","html_url":"http://0.0.0.0:41459/admin/demo/src/branch/main/%C3%88%C2%97","git_url":"http://0.0.0.0:41459/ap // Output truncated...
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"content": ""}' http://0.0.0.0:41459/api/v1/repos/admin/demo/contents/%C3%88%C2%97
GET/teams/{id}/activities/feeds
Response violates schema+1 moreless
  • Schema-violating request accepted
326

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/teams/1/activities/feeds?page=null&page=null'

Response violates schemaST1082 violations

"" is not a "email"

Validated against the response schema for status code 200.

Schema at /definitions/User/properties/email:

    {
        "format": "email",
        "type": "string",
        "x-go-name": "Email"
    }

Value:

    ""
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/Comment:

    {
        "type": "object",
        "description": "Comment represents a comment on a commit or issue",
        "properties": {
            "assets": {
                "description": "Attachments contains files attached to the comment",
                "type": "array",
                "items": {
                    "$ref": "#/components/schemas/Attachment"
                },
                "x-go-name": "Attachments"
            },
            "body": {
                "description": "Body contains the comment text content",
                "type": "string",
                "x-go-name": "Body"
            },
            "created_at": {
                "type": "string",
        // Output truncated...
    }

Value:

    null
Response200 OK
[{"id":197,"user_id":7,"op_type":"create_repo","act_user_id":1,"act_user":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"\fà‚„4򕈥ÝÇ򁴚b","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"×","is_admin":true,"last_login":"1970-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":true,"prohibit_login":false,"location": // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/teams/15/activities/feeds
GET/teams/{id}/repos
Response violates schema+1 moreless
  • Schema-violating request accepted
333

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/teams/1/repos?page=null&page=null'

Response violates schemaST108

"" is not a "email"

Validated against the response schema for status code 200.

Schema at /definitions/User/properties/email:

    {
        "format": "email",
        "type": "string",
        "x-go-name": "Email"
    }

Value:

    ""
Response200 OK
[{"id":31,"owner":{"id":4,"login":"workbench-user","type":"Organization","login_name":"","source_id":0,"full_name":"ÿ\u001c‘","email":"","avatar_url":"http://0.0.0.0:41459/avatars/fa25ceee0d7be94b95c0208f7456232d4e85b901ba9bb49d8219ba29e2313dc7","html_url":"http://0.0.0.0:41459/workbench-user","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:59:28Z","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"€򰸁\u001d􊧿\\9¼ŸKêFI // Output truncated...
Reproduce
  1. GET/user/teams
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/teams
  2. GET/teams/2/reposfailed here
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/teams/2/repos?page=-57313678986&limit=-1911'
GET/user/following
Response violates schema+1 moreless
  • Schema-violating request accepted
581

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/following?page=null&page=null'

Response violates schemaST108

"" is not a "email"

Validated against the response schema for status code 200.

Schema at /definitions/User/properties/email:

    {
        "format": "email",
        "type": "string",
        "x-go-name": "Email"
    }

Value:

    ""
Response200 OK
[{"id":3,"login":"UndefinedContentType","type":"Organization","login_name":"","source_id":0,"full_name":"","email":"","avatar_url":"http://0.0.0.0:41459/avatars/1f303fd10424e23d36ee4dbd6af13c4d735f75bfe318b1259474fa53863403ba","html_url":"http://0.0.0.0:41459/UndefinedContentType","language":"","is_admin":false,"last_login":"1970-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":true,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followe // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/following
GET/user/repos
Response violates schema+1 moreless
  • Schema-violating request accepted
567

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
[{"id":1,"owner":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_c // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/repos?page=null&page=null'

Response violates schemaST108

"" is not a "email"

Validated against the response schema for status code 200.

Schema at /definitions/User/properties/email:

    {
        "format": "email",
        "type": "string",
        "x-go-name": "Email"
    }

Value:

    ""
Response200 OK
[{"id":31,"owner":{"id":4,"login":"workbench-user","type":"Organization","login_name":"","source_id":0,"full_name":"ÿ\u001c‘","email":"","avatar_url":"http://0.0.0.0:41459/avatars/fa25ceee0d7be94b95c0208f7456232d4e85b901ba9bb49d8219ba29e2313dc7","html_url":"http://0.0.0.0:41459/workbench-user","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:59:28Z","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"€򰸁\u001d􊧿\\9¼ŸKêFI // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/repos?limit=0'
GET/users/{username}/following
Response violates schema+1 moreless
  • Schema-violating request accepted
378

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/users/workbench-user/following?page=null&page=null'

Response violates schemaST108

"" is not a "email"

Validated against the response schema for status code 200.

Schema at /definitions/User/properties/email:

    {
        "format": "email",
        "type": "string",
        "x-go-name": "Email"
    }

Value:

    ""
Response200 OK
[{"id":6,"login":"UndefinedContentType","type":"Organization","login_name":"","source_id":0,"full_name":"","email":"","avatar_url":"http://0.0.0.0:41459/avatars/e753017a85046de092bc9f42cf37515e4aa902e0f3458c661ee9e14d1b2d8a95","html_url":"http://0.0.0.0:41459/UndefinedContentType","language":"","is_admin":false,"last_login":"1970-01-01T00:00:00Z","created":"2026-10-19T12:20:52Z","restricted":false,"active":true,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followe // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/users/admin/following
GET/repos/{owner}/{repo}/branch_protections/{name}Response violates schema293

Response violates schemaST108

null is not of type "array"

Validated against the response schema for status code 200.

Schema at /properties/status_check_contexts:

    {
        "type": "array",
        "items": {
            "type": "string"
        },
        "x-go-name": "StatusCheckContexts"
    }

Value:

    null
Response200 OK
{"branch_name":"񅼢î'a§Q»","rule_name":"񅼢î'a§Q»","priority":2,"enable_push":false,"enable_push_whitelist":false,"push_whitelist_usernames":[],"push_whitelist_teams":[],"push_whitelist_deploy_keys":false,"enable_force_push":false,"enable_force_push_allowlist":false,"force_push_allowlist_usernames":[],"force_push_allowlist_teams":[],"force_push_allowlist_deploy_keys":false,"enable_merge_whitelist":false,"merge_whitelist_usernames":[],"merge_whitelist_teams":[],"enable_bypass_allowlist":false,"bypass_allowlist_u // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/branch_protections/%F1%85%BC%A2%C3%AE%27a%C2%A7Q%C2%BB
GET/repos/{owner}/{repo}/issues/{index}/timesResponse violates schema358

Response violates schemaST1087 violations

null is not of type "array"

Validated against the response schema for status code 200.

Schema at /definitions/Issue/properties/assignees:

    {
        "type": "array",
        "items": {
            "$ref": "#/components/schemas/User"
        },
        "x-go-name": "Assignees"
    }

Value:

    null
null is not of type "array"

Validated against the response schema for status code 200.

Schema at /definitions/Issue/properties/projects:

    {
        "type": "array",
        "items": {
            "$ref": "#/components/schemas/Project"
        },
        "x-go-name": "Projects"
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/Milestone:

    {
        "type": "object",
        "description": "Milestone milestone is a collection of issues on one repo...
        "properties": {
            "closed_at": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Closed"
            },
            "closed_issues": {
                "description": "ClosedIssues is the number of closed issues in th...
                "type": "integer",
                "format": "int64",
                "x-go-name": "ClosedIssues"
            },
            "created_at": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Created"
        // Output truncated...
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/PullRequestMeta:

    {
        "type": "object",
        "description": "PullRequestMeta PR info if an issue is a PR",
        "properties": {
            "draft": {
                "type": "boolean",
                "x-go-name": "IsWorkInProgress"
            },
            "html_url": {
                "type": "string",
                "x-go-name": "HTMLURL"
            },
            "merged": {
                "type": "boolean",
                "x-go-name": "HasMerged"
            },
            "merged_at": {
                "type": "string",
                "format": "date-time",
        // Output truncated...
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/User:

    {
        "type": "object",
        "description": "User represents a user",
        "properties": {
            "active": {
                "description": "Is user active",
                "type": "boolean",
                "x-go-name": "IsActive"
            },
            "avatar_url": {
                "description": "URL to the user's avatar",
                "type": "string",
                "x-go-name": "AvatarURL"
            },
            "created": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Created"
            },
        // Output truncated...
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/Issue/properties/closed_at:

    {
        "type": "string",
        "format": "date-time",
        "x-go-name": "Closed"
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/Issue/properties/due_date:

    {
        "type": "string",
        "format": "date-time",
        "x-go-name": "Deadline"
    }

Value:

    null
Response200 OK
[{"id":1,"created":"2026-10-19T12:00:50Z","time":2,"user_id":1,"user_name":"admin","issue_id":1,"issue":{"id":1,"url":"http://localhost:3000/api/v1/repos/admin/demo/issues/1","html_url":"http://0.0.0.0:41459/admin/demo/issues/1","number":1,"user":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","lang // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/times
GET/repos/{owner}/{repo}/timesResponse violates schema354

Response violates schemaST1087 violations

null is not of type "array"

Validated against the response schema for status code 200.

Schema at /definitions/Issue/properties/assignees:

    {
        "type": "array",
        "items": {
            "$ref": "#/components/schemas/User"
        },
        "x-go-name": "Assignees"
    }

Value:

    null
null is not of type "array"

Validated against the response schema for status code 200.

Schema at /definitions/Issue/properties/projects:

    {
        "type": "array",
        "items": {
            "$ref": "#/components/schemas/Project"
        },
        "x-go-name": "Projects"
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/Milestone:

    {
        "type": "object",
        "description": "Milestone milestone is a collection of issues on one repo...
        "properties": {
            "closed_at": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Closed"
            },
            "closed_issues": {
                "description": "ClosedIssues is the number of closed issues in th...
                "type": "integer",
                "format": "int64",
                "x-go-name": "ClosedIssues"
            },
            "created_at": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Created"
        // Output truncated...
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/PullRequestMeta:

    {
        "type": "object",
        "description": "PullRequestMeta PR info if an issue is a PR",
        "properties": {
            "draft": {
                "type": "boolean",
                "x-go-name": "IsWorkInProgress"
            },
            "html_url": {
                "type": "string",
                "x-go-name": "HTMLURL"
            },
            "merged": {
                "type": "boolean",
                "x-go-name": "HasMerged"
            },
            "merged_at": {
                "type": "string",
                "format": "date-time",
        // Output truncated...
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/User:

    {
        "type": "object",
        "description": "User represents a user",
        "properties": {
            "active": {
                "description": "Is user active",
                "type": "boolean",
                "x-go-name": "IsActive"
            },
            "avatar_url": {
                "description": "URL to the user's avatar",
                "type": "string",
                "x-go-name": "AvatarURL"
            },
            "created": {
                "type": "string",
                "format": "date-time",
                "x-go-name": "Created"
            },
        // Output truncated...
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/Issue/properties/closed_at:

    {
        "type": "string",
        "format": "date-time",
        "x-go-name": "Closed"
    }

Value:

    null
null is not of type "string"

Validated against the response schema for status code 200.

Schema at /definitions/Issue/properties/due_date:

    {
        "type": "string",
        "format": "date-time",
        "x-go-name": "Deadline"
    }

Value:

    null
Response200 OK
[{"id":1,"created":"2026-10-19T12:00:50Z","time":2,"user_id":1,"user_name":"admin","issue_id":1,"issue":{"id":1,"url":"http://localhost:3000/api/v1/repos/admin/demo/issues/1","html_url":"http://0.0.0.0:41459/admin/demo/issues/1","number":1,"user":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","lang // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/times
GET/repositories/{id}Response violates schema304

Response violates schemaST108

"" is not a "email"

Validated against the response schema for status code 200.

Schema at /definitions/User/properties/email:

    {
        "format": "email",
        "type": "string",
        "x-go-name": "Email"
    }

Value:

    ""
Response200 OK
{"id":21,"owner":{"id":4,"login":"workbench-user","type":"Organization","login_name":"","source_id":0,"full_name":"ÿ\u001c‘","email":"","avatar_url":"http://0.0.0.0:41459/avatars/fa25ceee0d7be94b95c0208f7456232d4e85b901ba9bb49d8219ba29e2313dc7","html_url":"http://0.0.0.0:41459/workbench-user","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:59:28Z","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"€򰸁\u001d􊧿\\9¼ŸKêFIÞ // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repositories/21
GET/teams/{id}Response violates schema302

Response violates schemaST1082 violations

null is not of type "array"

Validated against the response schema for status code 200.

Schema at /definitions/Team/properties/units:

    {
        "type": "array",
        "description": "Deprecated: This variable should be replaced by UnitsMap ...
        "items": {
            "type": "string"
        },
        "x-deprecated": true,
        "x-go-name": "Units",
        "example": [
            "repo.code",
            "repo.issues",
            "repo.ext_issues",
            "repo.wiki",
            "repo.pulls",
            "repo.releases",
            "repo.projects",
            "repo.ext_wiki"
        ]
    }

Value:

    null
null is not of type "object"

Validated against the response schema for status code 200.

Schema at /definitions/Team/properties/units_map:

    {
        "type": "object",
        "additionalProperties": {
            "type": "string"
        },
        "x-go-name": "UnitsMap",
        "example": {
            "repo.code": "read",
            "repo.ext_issues": "none",
            "repo.ext_wiki": "none",
            "repo.issues": "write",
            "repo.projects": "none",
            "repo.pulls": "owner",
            "repo.releases": "none",
            "repo.wiki": "admin"
        }
    }

Value:

    null
Response200 OK
{"id":18,"name":"BSD-3-Clause","description":" \u001e","organization":{"id":7,"name":"0","full_name":"ก ำกำ","email":"","avatar_url":"http://0.0.0.0:41459/avatars/b110d889e34e617e2b2bff57aac3557676c2f681f365bad5a89615d7a806f0f4","description":"Þô","website":"","location":"V‹g`µ񼀖ᙔ—„6󈓕²","visibility":"limited","repo_admin_change_team_access":true,"username":"0"},"includes_all_repositories":true,"permission":"read","units":null,"units_map":null,"can_create_org_repo":false,"visibility":"public"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/teams/18
DELETE/admin/users/{username}/badges
Missing Content-Type header+3 moreless
  • Schema-valid request rejected
  • Undocumented Content-Type
  • Undocumented status code
309

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"badge_slugs": ["badge1", "badge2"]}' http://0.0.0.0:41459/api/v1/admin/users/workbench-user/badges

Undocumented status codeST103

Received: 404
Documented: 204, 403, 422
Response404 Not Found
{"message":"user redirect does not exist [name: 0]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"badge_slugs": ["badge1", "badge2"]}' http://0.0.0.0:41459/api/v1/admin/users/0/badges

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[BadgeSlugs]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/admin/users/workbench-user/badges

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
  1. GET/user/emails
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/emails
  2. DELETE/admin/users/0/badgesfailed here
    curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\u0006\u00d6\ud887\udda6\u00c7": {"\u00bf\ud812\udfc2": [null], "\u00e3\udb4d\uddf9\udb35\udf45G\ud96a\udd45\u00d5\u009d~": ["MW", "0/0", false]}, "\uda11\udc5c": {"Mq\udb3e\udebc": true, "\udb72\udcf0\u00c3?\u00a8\u00137": -130, "\udbd0\udcf3\u00cf": null}, "badge_slugs": ["\u00f3\u00de\u0013S\r\u00ab\u00ea\u00e8\u0081", "9", "nU\u00d5\udb77\udcb9\"A\ud9ca\udcb9\ud93d\udf5f\uda62\udf0c\u0017", "\u0099\u00ac\u00d4", ""]}' http://0.0.0.0:41459/api/v1/admin/users/0/badges
PUT/orgs/{org}/actions/secrets/{secretname}
Missing Content-Type header+3 moreless
  • Schema-valid request rejected
  • Undocumented Content-Type
  • Undocumented status code
256

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"data": ""}' http://0.0.0.0:41459/api/v1/orgs/workbench/actions/secrets/0

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 201, 204, 400, 404
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/actions/secrets/%F3%90%A6%91%F2%AE%9E%A8%C2%9F%5B

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response400 Bad Request
{"message":"name must start with a letter or underscore and contain only letters, numbers, and underscores","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"data": "\u0014EB\u00db$\u00c4c\udb2d\udc12"}' http://0.0.0.0:41459/api/v1/orgs/workbench/actions/secrets/%F3%90%A6%91%F2%AE%9E%A8%C2%9F%5B

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response201 Created
<EMPTY>
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\u00b9": [], "\u00b81": 7.8122010371693e+117, "\u008bv\u009c\u00ed\u008b\u0013\u00d1}S\udaa0\uddc1\u0010\ud9e7\udd71\u00f9\u0085&\u0010\u00f8\u0012\u00bf\ud84f\udc81": {}, "data": "'"'"'\u00fc\ud875\udf54\u001f\u008b<"}' http://0.0.0.0:41459/api/v1/orgs/workbench/actions/secrets/qx
PUT/orgs/{org}/actions/variables/{variablename}
Missing Content-Type header+3 moreless
  • Schema-valid request rejected
  • Undocumented Content-Type
  • Undocumented status code
228

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"value": ""}' http://0.0.0.0:41459/api/v1/orgs/workbench/actions/variables/0

Undocumented status codeST103

Received: 422
Documented: 201, 204, 400, 404
Response422 Unprocessable Content
{"message":"[]: jsontext: invalid character '\\x00' at start of value","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d $'\x00' http://0.0.0.0:41459/api/v1/orgs/workbench/actions/variables/h

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[Value]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"value": ""}' http://0.0.0.0:41459/api/v1/orgs/workbench/actions/variables/h

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\u001a\u0083\u0096\u0081RH": null, "value": "\u0002\udb2c\udc75k\u0086\u00ed\u00bb", "description": ""}' http://0.0.0.0:41459/api/v1/orgs/workbench/actions/variables/h
GET/admin/actions/jobs
Schema-valid request rejected+2 moreless
  • Schema-violating request accepted
  • Undocumented status code
625

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response400 Bad Request
{"message":"invalid status ","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/admin/actions/jobs?status=&page=0&limit=0&sort=&order='

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
{"jobs":[],"total_count":0}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/admin/actions/jobs?page=null&page=null'

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"Invalid sort mode: \"\\U000c6b97\\U00038348Á\\u0097\\U00102816D\\u0094\"","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/admin/actions/jobs?page=-597&sort=%F3%86%AE%97%F0%B8%8D%88%C3%81%C2%97%F4%82%A0%96D%C2%94'

Undocumented status codeST103

Received: 401
Documented: 200, 400, 404, 422
Response401 Unauthorized
{"message":"token is required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: |' http://0.0.0.0:41459/api/v1/admin/actions/jobs
DELETE/admin/users/{username}
Missing Content-Type header+2 moreless
  • Schema-valid request rejected
  • Undocumented Content-Type
357

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/admin/users/workbench-user?purge=true'

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"target is an organization but not user","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/admin/users/workbench-user

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
  1. GET/user/keys
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/keys?page=-2565&limit=-243132388688384300679168&fingerprint=gdt_Fg%2A%2A%2A%2A%2A%2A%2A%2Ayv'
  2. DELETE/admin/users/workbenchfailed here
    curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/admin/users/workbench?purge=true'
GET/orgs/{org}/actions/variables
Schema-violating request accepted+2 moreless
  • Undocumented Content-Type
  • Undocumented status code
283

Undocumented status codeST103

Received: 403
Documented: 200, 400, 404
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'Authorization: h' -H 'X-GITEA-OTP: cSA' 'http://0.0.0.0:41459/api/v1/orgs/workbench/actions/variables?page=55876006818&limit=2736&sudo=%F1%A1%96%AA%25%C2%BB'

Undocumented status codeST103

Received: 401
Documented: 200, 400, 404
Response401 Unauthorized
{"message":"token is required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: h' -H 'X-GITEA-OTP: cSA' 'http://0.0.0.0:41459/api/v1/orgs/workbench/actions/variables?limit=0'

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X GET -H 'Authorization;' http://0.0.0.0:41459/api/v1/orgs/workbench/actions/variables

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameters `page`, `limit` in query
  - violates `type` at /properties/page (was integer, became array)
  - violates `type` at /properties/limit (was integer, became string)
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/orgs/workbench/actions/variables?limit=%C2%A1z%C3%A3%15%C2%B9w%C3%9F%5E%24D%C3%A4%C2%AE&page=1.9'
DELETE/orgs/{org}/blocks/{username}Missing test data
Schema-valid request rejected+2 moreless
  • Undocumented Content-Type
  • Undocumented status code
268

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/blocks/admin

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 400
Documented: 204, 404, 422
Response400 Bad Request
{"message":"cannot unblock the user","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/blocks/admin

Undocumented status codeST103

Received: 401
Documented: 204, 404, 422
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization;' 'http://0.0.0.0:41459/api/v1/orgs/workbench/blocks/q%5B%C3%90P%5D%1AA%C3%A9%F3%B7%AC%A3%F1%B0%90%B59%C3%A3%C2%85%7C?token=yP6c69usmOd9zjUQWO7NkzuOwbp0cbUP0U7JPsLV&access_token=%C3%93E%C3%AE&sudo='

Undocumented status codeST103

Received: 403
Documented: 204, 404, 422
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X DELETE -H 'Authorization;' 'http://0.0.0.0:41459/api/v1/orgs/workbench/blocks/admin?sudo=%C3%8B%F3%A3%85%A8'
PUT/orgs/{org}/blocks/{username}Missing test data
Schema-valid request rejected+2 moreless
  • Undocumented Content-Type
  • Undocumented status code
271

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/blocks/admin

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 400
Documented: 204, 404, 422
Response400 Bad Request
{"message":"cannot block the user","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/blocks/admin
PATCH/orgs/{org}/hooks/{id}Missing test data
Schema-valid request rejected+2 moreless
  • Undocumented Content-Type
  • Undocumented status code
330

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/orgs/workbench/hooks/1

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 1 additional property not defined in the schema (`ÌМ`). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.

Undocumented status codeST103

Received: 422
Documented: 200, 404
Response422 Unprocessable Content
{"message":"[BranchFilter]: unterminated character class","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\u00cc\u00c4\u0090\u009c": [], "branch_filter": "[\u00d7w\u00a9(\u00ab\u0088\udb64\ude90", "authorization_header": "\ud866\ude35"}' http://0.0.0.0:41459/api/v1/orgs/workbench/hooks/1
GET/orgs/{org}/members/{username}
Missing Content-Type header+2 moreless
  • Undocumented Content-Type
  • Undocumented status code
295

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/members/admin

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/members/workbench-user

Undocumented Content-TypeST105

Received: text/html; charset=utf-8
Documented: application/json

Undocumented status codeST103

Received: 307
Documented: 204, 303, 404
Response307 Temporary Redirect
<a href="/api/v1/orgs/0/members/admin">Temporary Redirect</a>.
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/members/admin
PUT/repos/{owner}/{repo}/issues/{index}/lock
Missing Content-Type header+2 moreless
  • Schema-valid request rejected
  • Undocumented status code
319

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/lock

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 204, 403, 404
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/lock
PUT/user/actions/secrets/{secretname}
Missing Content-Type header+2 moreless
  • Schema-valid request rejected
  • Undocumented status code
264

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 201, 204, 400, 404
Response422 Unprocessable Content
{"message":"[Data]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"data": "", "description": ""}' http://0.0.0.0:41459/api/v1/user/actions/secrets/0

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response201 Created
<EMPTY>
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\u0095\u00d0\ud8ba\udf54(`\ud993\udd90\u00a0\ud833\ude9f": [], "data": "\ud835\udc7b\ud835\udc89\ud835\udc86 \ud835\udc92\ud835\udc96\ud835\udc8a\ud835\udc84\ud835\udc8c \ud835\udc83\ud835\udc93\ud835\udc90\ud835\udc98\ud835\udc8f \ud835\udc87\ud835\udc90\ud835\udc99 \ud835\udc8b\ud835\udc96\ud835\udc8e\ud835\udc91\ud835\udc94 \ud835\udc90\ud835\udc97\ud835\udc86\ud835\udc93 \ud835\udc95\ud835\udc89\ud835\udc86 \ud835\udc8d\ud835\udc82\ud835\udc9b\ud835\udc9a \ud835\udc85\ud835\udc90\ud835\udc88"}' http://0.0.0.0:41459/api/v1/user/actions/secrets/True

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response400 Bad Request
{"message":"name must start with a letter or underscore and contain only letters, numbers, and underscores","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"data": "\u001e\u0007R\u0083\udbdf\udea4\u00a4\u0005\u00fb\u008d\uda53\udde3\u00a5"}' http://0.0.0.0:41459/api/v1/user/actions/secrets/%C3%A2%F0%B3%99%A4%17%C3%AE%7C
PUT/user/actions/variables/{variablename}
Missing Content-Type header+2 moreless
  • Schema-valid request rejected
  • Undocumented status code
297

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 201, 204, 400, 404
Response422 Unprocessable Content
{"message":"[Value]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"description": "", "name": "", "value": ""}' http://0.0.0.0:41459/api/v1/user/actions/variables/0

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"": null, "value": "\u00e5\u0012"}' http://0.0.0.0:41459/api/v1/user/actions/variables/h

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 4 additional properties not defined in the schema (``, `HÁà ÎÕ`, `Ã򉯕àÙ񪝤“1g` and 1 more). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.
Response400 Bad Request
{"message":"name must start with a letter or underscore and contain only letters, numbers, and underscores","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\u001d\u000b": [">", 2.2633963226847096e+144], "\u00c6,": true, "H\u00c1\u00e0 \u00ce\u00d5\u0019": {}, "\u00c3\ud9e6\udfd5\u00e0\u00d9\ud969\udf64\u0012\u00931g": [], "description": "", "name": "attachment.gif", "value": "\u0003\u00b3\u0081[\u00d3"}' http://0.0.0.0:41459/api/v1/user/actions/variables/tU

Undocumented status codeST103

Received: 401
Documented: 201, 204, 400, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: l#C' -H 'Sudo: (LP6OyN~7VAtP@#@*k_' -H 'Content-Type: application/json' -d '{"": [], "\u00a696\ud987\udf73$\ud9b3\ude46\u00c3\u0096\u0095EN\u00fa": [-1.192092896e-07, {"\u00da\u0016\r\u0004": -665}, [true, "\ud8cb\udcb2gK\u009e"]], "H\u00b7\u008d\u00f1 \udbe7\udcc0\u00ea": {"": {"|\u009d\ud97d\ude3c\u0018[\u007fu\ud81f\udfa5\ud8ac\udea6\u00f0\ud9c0\udfc361\u00c2\ud923\uddcd\udae4\uded3\u00c5\u00da": null}, "*": [null, null, null], "\ud87b\udd19)\u00a5\udb25\udcd7\udb2f\uddc4": [true]}, "\u00d5\u00b6": {"\u0092": [-4.796832237397915e+16, null, null]}, "\u00b0\uda2f\udead\ud99c\udc80\u0090\ud851\udc5c\ud97c\ude29\udb6e\udf14\u000b": [true], "value": "\u00ac\u00ff\u0082", "description": "T\u00d5\u000f", "name": "\uda41\ude6a"}' 'http://0.0.0.0:41459/api/v1/user/actions/variables/%07?sudo=&token=nNmUoOJ6Y6N14y0utuU3rLUxJjMRkQyKiekJ8Yv1&access_token=%C3%B5%F1%84%AD%8E'
PUT/user/blocks/{username}Missing test data
Schema-valid request rejected+2 moreless
  • Undocumented Content-Type
  • Undocumented status code
289

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 400
Documented: 204, 404, 422
Response400 Bad Request
{"message":"cannot block the user","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/blocks/admin

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/blocks/workbench
DELETE/user/emails
Missing Content-Type header+2 moreless
  • Schema-violating request accepted
  • Undocumented status code
312

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"emails": []}' http://0.0.0.0:41459/api/v1/user/emails

Undocumented status codeST103

Received: 422
Documented: 204, 404
Response422 Unprocessable Content
{"message":"[]: json: unable to unmarshal JSON object into Go string within \"/emails/0\"","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"emails": [{}]}' http://0.0.0.0:41459/api/v1/user/emails

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: in body - emails: Incorrect type
Response204 No Content
<EMPTY>
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"emails": null}' http://0.0.0.0:41459/api/v1/user/emails
PATCH/user/settings
Schema-valid request rejected+2 moreless
  • Schema-violating request accepted
  • Undocumented status code
296

Undocumented status codeST103

Received: 422
Documented: 200
Response422 Unprocessable Content
{"message":"[]: json: unable to unmarshal JSON object into Go string within \"/website\"","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"description": "", "diff_view_style": "", "full_name": "", "hide_activity": false, "hide_email": false, "language": "", "location": "", "theme": "", "website": {}}' http://0.0.0.0:41459/api/v1/user/settings

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: in body - website: Incorrect type
Response200 OK
{"full_name":"","website":"","description":"","location":"","language":"","theme":"","diff_view_style":"","hide_email":false,"hide_activity":false}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"description": "", "diff_view_style": "", "full_name": "", "hide_activity": false, "hide_email": false, "language": "", "location": "", "theme": "", "website": null}' http://0.0.0.0:41459/api/v1/user/settings

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 1 additional property not defined in the schema (`𜝧ÌJˆkÑ(Å󬨝û:ñ`). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.
Response422 Unprocessable Content
{"message":"[Website]: Url","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\ud831\udf67\u00cc\u0004J\u0088k\u00d1(\u00c5\u0012\udb72\ude1d\u00fb:\u00f1": null, "language": "", "diff_view_style": "", "full_name": "\u00ff\u001c\u0091", "hide_email": true, "location": "", "theme": "\u009e)8\ud83d\udcd6\ud91a\udd70\udb1a\ude82", "hide_activity": false, "website": "\u000b\u008a\u008b!\u0082", "description": "\uda3f\udd8a\ud9ed\ude6f\u00fd\t\udac2\udc264\ud816\udf76\u007f\ud8e3\udf55"}' http://0.0.0.0:41459/api/v1/user/settings
GET/users/{username}/followers
Schema-violating request accepted+2 moreless
  • Undocumented Content-Type
  • Undocumented status code
358

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameters `limit`, `page` in query
  - violates `type` at /properties/limit (was integer, became null)
  - violates `type` at /properties/page (was integer, became boolean)
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/users/admin/followers?page=true&limit=null'

Undocumented status codeST103

Received: 403
Documented: 200, 404
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'Authorization: ,1u(' -H 'Sudo: [C' 'http://0.0.0.0:41459/api/v1/users/admin/followers?limit=508&sudo=%C3%B0%F2%A8%AB%8D%C3%902%EA%95%95'

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
  1. GET/user/emails
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/emails
  2. GET/users/0/followersfailed here
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/users/0/followers?page=606'
GET/users/{username}/orgs
Schema-violating request accepted+2 moreless
  • Undocumented Content-Type
  • Undocumented status code
398

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - violates `type` at /properties/page (was integer, became array)
Response200 OK
[{"id":4,"name":"workbench-user","full_name":"ÿ\u001c‘","email":"","avatar_url":"http://0.0.0.0:41459/avatars/fa25ceee0d7be94b95c0208f7456232d4e85b901ba9bb49d8219ba29e2313dc7","description":"€򰸁\u001d􊧿\\9¼ŸKêFIÞ\u0019\u0007{񵦹񢙒","website":"","location":"","visibility":"public","repo_admin_change_team_access":true,"username":"workbench-user"}]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/users/admin/orgs?page=false&page=1.8521567364421684e%2B122&page=-1.1754943508222875e-38&page=X%C2%99%7F%F0%AD%B2%A7%C2%926%19Xv%C2%88&page=-9.950827278157505e-73&page=&page=%C2%82%C3%88L&page=%C2%A6%F0%AE%99%A5%C3%B4j%C3%8C%26%2A%29%F3%9E%B2%AC%F1%89%BC%9C%28%C2%92U%C2%AC%F1%AB%92%9E%C2%95%22%7D&page=%C3%A0%C2%9D%F3%B1%8C%9E%C2%87%C2%AD%C3%83&page=%C2%B3-%F0%AA%A4%96%C3%AB%C3%AE&page=%5B%5D&page=%7B%27%27%3A+%7B%27%5CU000cc003%5Cx9f%27%3A+%27null%27%7D%7D&page=%7B%27%27%3A+%27true%27%2C+%27%C3%BD%5Cx16%27%3A+%5B5.110231258839461e%2B16%2C+6025%2C+%27true%27%5D%2C+%27%5Cx9c%5CU0001c35d%5Cx02O%C2%A7%5Cx0b%C3%97%C3%A0%5Cx80%C2%BA%C3%B9Ue%5CU000d2062a%27%3A+%7B%7D%7D&page=%7B%27true%27%3A+%27%27%2C+%27.%C3%A9%27%3A+%27null%27%7D&page=%7B%7D&page=%7B%7D&page=%C3%82%C3%BE0%C2%83%C2%A6%60%C3%A3s%F3%B6%A4%A58%F1%B9%9D%A35%F0%A7%A1%8D%C3%B9%C3%85%F2%BF%B8%B3&page=%5B%5B-2.00001%2C+2759075199%2C+-2.4692915723216295e%2B295%5D%2C+-449994781%2C+%5B%27null%27%5D%5D&page=4.327383342858275e%2B16'

Undocumented status codeST103

Received: 403
Documented: 200, 404
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'Authorization: j^=Bmfe' -H 'Sudo: zGE'"'"'QK5N)' http://0.0.0.0:41459/api/v1/users/admin/orgs

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
  1. GET/user/emails
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/emails
  2. GET/users/0/orgsfailed here
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/users/0/orgs
GET/users/{username}/tokens
Schema-violating request accepted+2 moreless
  • Undocumented Content-Type
  • Undocumented status code
356

Undocumented status codeST103

Received: 404
Documented: 200, 403
Response404 Not Found
{"message":"user redirect does not exist [name: 0]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/users/0/tokens?page=0&limit=0'

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - violates `type` at /properties/page (was integer, became array)
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/users/admin/tokens?page=%5B%5B413176352555016.0%2C+-3.87487368438624e%2B16%2C+%27null%27%5D%2C+%7B%7D%2C+%7B%7D%5D&page=%7B%7D&page=%7B%27%C3%9Ae8%C3%80%C3%96%5CU000dbdcc%5CU000111fe%5CU00038d53%E8%81%BB%5Cx06m%27%3A+%7B%27%C3%87%3B%27%3A+-1.4817069842837338e-65%2C+%27%60A%27%3A+%27%5Cx80%27%2C+%27%5CU000aed5c%5CU000cfd8e%27%3A+%27%5Cx05%27%7D%2C+%27%C3%97%27%3A+%5B%5D%2C+%27%5Cx9e%27%3A+%27false%27%7D&page=%7B%271%C2%B2%5D%27%3A+%27%27%7D&page=%5B%5D&page=%C2%B7w%C2%B6_%F0%AA%8E%BDL%C2%8F%09%C2%95&page=%7B%7D&page=%5B%5B%5D%2C+%27null%27%5D&page=%7B%27%5CU00044d11%27%3A+%5B%27null%27%2C+%27false%27%2C+674174%5D%7D&page=%7B%27%5CU0006b806%27%3A+%5B%27false%27%2C+%27%27%2C+-1.9141834899447085e-54%5D%2C+%27%C3%AC%C3%96%5CU00038f5a%27%3A+%7B%7D%2C+%271%2B%C3%88%C3%B8%5CU0005de19%5Cx84%5CU000e2051T%C3%89%27%3A+%7B%27%C3%80%27%3A+%27%5CU000e9e6aO%C3%91%5Cx93%C3%8B%5Cx0f%5Cx08%5CU000566e3%5CU0003b463pX%5C%5CD%25%C3%AB9%5Cx035%5Cx14%27%7D%7D&page=%5B%5B%27null%27%5D%5D&page=4.342102495926112e%2B16&page=-12463561&page=%5B%7B%7D%2C+%5B%5D%5D&page=%5B%5D&page=-378645&page=%7B%7D&page=%7B%27%C2%B9%5Cx9aw%27%3A+%27%5Cx0f%C3%A4%3D%27%2C+%27Y%27%3A+%271%5CU0005a020%5Cx05%27%2C+%27a%5Cnb%5Crc%5Cx85d%5Cx0be%5Cx0cf%5Cu2028g%5Cu2029h%5Cr%5Cni%27%3A+%27false%27%7D&page=%5C&page=b%F0%BA%AF%A9%14%F3%BD%BE%BA%C2%A2%C2%B1&page=%F0%B0%A8%B1%C3%A8%C3%AD%EE%BD%8A%7D%F0%B5%96%AE%C2%90%F3%9C%AA%B5&page=%C3%A9C%C2%BA%C3%95yHY%1Bu%0A%C3%B1%C2%B9%F1%9F%9E%AD%C2%9C%3FZO%F3%BF%A6%9A&page=%5B%5B%27null%27%5D%5D&page=-script.pyw&page=%7B%27%C3%B34%27%3A+1.1754943508222875e-38%7D&page=%7B%27%7B%5Cx9c%5CU00079c6c%5Cx18%27%3A+-7966%2C+%27%5CU000c58ea%27%3A+%27false%27%2C+%27%5CU000cba3f%C2%B6%C2%A4%5CU00090f8c%F0%A9%B9%AC%5CU0007d74b%5Cx08%5Cx93T%22%C2%AA%60%5CU000cac5c%5CU000bd428%5CU000e4c59%27%3A+%27null%27%7D&page=0%F2%AF%9B%8B%C2%AA%2C&page=%7B%27%C3%A7.0%5Cx99%5CU00091c18%27%3A+-8128%2C+%27%C2%B5%5CU0004afbc%C2%A1%C3%AD%5Cn%5CU000c66bb%5Cx90%5Cx9f%C3%93%5C%5C%F0%98%8E%BE%5Cx1b%C2%AB%5CU0008ee58%5CU0003d57b%5CU00088c15%5CU000d0689d%5CU0010f4ab%C3%A8%5CU0005073c%27%3A+%27false%27%2C+%27sr%F0%90%A0%BC%40e%C2%BAN%C2%BF%5CU00098c1a%C2%AB%C3%B87%5CU00106dd1%5Cx8e%5Cx1e%27%3A+%27true%27%7D&page=%7C%C3%87%06%C2%87%03O%C2%88%C2%9A%F1%B1%8D%B0%40H%C3%9BQ%F3%A9%A5%9D&page=%7B%27%C2%BAq%27%3A+%7B%7D%2C+%27%27%3A+%27%C3%B6%7Bx%5Cx03%C3%8A%C2%BB%C3%9B%F0%97%88%A8%C2%BE%F0%A3%BF%91P%C3%9A%C3%AA%5Cx8a%C3%90%5Cx0e%C3%87%C3%A3%C3%A4%C3%A7%C3%BF%C2%B1%27%7D&page=%5B%27%5Cx86%C3%B0%27%2C+%27%5CU0006df66%5Cr+%5Cx08%5Cx8aP%5Cx93O%5CU00032dc2%C3%88%5Cx82pv%C2%BC%C3%B8%C3%B5%27%2C+%27null%27%5D&page=%5B%27%5CU000ccc75%27%2C+%27null%27%5D&page=19522421169889432&page=%5B%5B%5D%5D&page=%7B%27%C2%A2%5Cx10%5Cx8d%C2%B3%C2%B2%5CU000a5efa%5CU000f4bfd%27%3A+%27N%5Cx91%5CU0005a26d%27%2C+%27%27%3A+%7B%27%C3%AB%C3%97%3A%5CU00012bfd%C3%A8%5CU0001c2e5%C2%A3%E8%9C%BBHw%27%3A+1.7976931348623157e%2B308%7D%7D&page=%7B%27%5Cx08%C2%BA%27%3A+%27false%27%2C+%27%C3%81%C3%90%C2%BA%3E%27%3A+%27false%27%2C+%27%5CU000e28ff%27%3A+%27true%27%7D&limit=11704'

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
  1. GET/admin/packages
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/admin/packages?page=566205'
  2. GET/users/workbench/tokensfailed here
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/users/workbench/tokens
GET/admin/emails
Schema-violating request accepted+1 moreless
  • Undocumented status code
572

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
[{"email":"admin@example.com","verified":true,"primary":true,"user_id":1,"username":"admin"},{"email":"workbench@example.com","verified":true,"primary":true,"user_id":2,"username":"workbench-user"}]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/admin/emails?page=null&page=null'

Undocumented status codeST103

Received: 401
Documented: 200, 403
Response401 Unauthorized
{"message":"token is required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: 2' -H 'X-GITEA-OTP;' http://0.0.0.0:41459/api/v1/admin/emails
GET/admin/hooks
Schema-violating request accepted+1 moreless
  • Undocumented status code
572

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `type` in query - type: Incorrect type
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/admin/hooks?type=null&type=null'

Undocumented status codeST103

Received: 401
Documented: 200
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: phases' 'http://0.0.0.0:41459/api/v1/admin/hooks?access_token=%C3%8A%C3%A3XP%3A&page=1136&token=%E5%B4%8A%C2%8AN%C2%AB%F3%96%B3%A5%29%5D7%5B%F2%83%A0%99%C2%A3%C2%B0c%F2%8C%BF%8B_%C2%8B%26&limit=696801649849688&sudo=&type=all'
GET/admin/orgs
Schema-violating request accepted+1 moreless
  • Undocumented status code
337

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
[{"id":3,"name":"workbench","full_name":"","email":"","avatar_url":"http://0.0.0.0:41459/avatars/1f303fd10424e23d36ee4dbd6af13c4d735f75bfe318b1259474fa53863403ba","description":"","website":"","location":"","visibility":"public","repo_admin_change_team_access":false,"username":"workbench"}]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/admin/orgs?page=null&page=null'

Undocumented status codeST103

Received: 401
Documented: 200, 403
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'X-GITEA-OTP;' -H 'Sudo: WEAAvb9zTS' -H 'Authorization: vY' 'http://0.0.0.0:41459/api/v1/admin/orgs?access_token=%F2%8C%B5%AA%C2%B7&page=1266094851115522&limit=-571061337'
GET/admin/packages
Schema-violating request accepted+1 moreless
  • Undocumented status code
577

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `type` in query - type: Incorrect type
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/admin/packages?type=null&type=null'

Undocumented status codeST103

Received: 401
Documented: 200, 403
Response401 Unauthorized
{"message":"token is required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'X-GITEA-OTP: AE`' -H $'Authorization: ~h\t17NL' http://0.0.0.0:41459/api/v1/admin/packages
GET/admin/users
Schema-valid request rejected+1 moreless
  • Schema-violating request accepted
684

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `source_id` in query - source_id: Value greater than maximum
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/admin/users?source_id=9223372036854775808'

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"Invalid sort mode: \"RejectedPositiveData\"","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/admin/users?source_id=0&is_restricted=false&sort=RejectedPositiveData&page=-504&login_name='
GET/notifications
Schema-violating request accepted+1 moreless
  • Undocumented status code
615

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `since` in query - since: Value not matching the 'date-time' format
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/notifications?since='

Undocumented status codeST103

Received: 422
Documented: 200
Response422 Unprocessable Content
{"message":"parsing time \"null\" as \"2006-01-02T15:04:05Z07:00\": cannot parse \"null\" as \"2006\"","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/notifications?since=null&since=null'
PUT/notifications
Schema-violating request accepted+1 moreless
  • Undocumented status code
340

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `last_read_at` in query - last_read_at: Value not matching the 'date-time' format
Response205 Reset Content
[]
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/notifications?last_read_at='

Undocumented status codeST103

Received: 400
Documented: 205
Response400 Bad Request
{"message":"parsing time \"null\" as \"2006-01-02T15:04:05Z07:00\": cannot parse \"null\" as \"2006\"","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/notifications?last_read_at=null&last_read_at=null'
PATCH/orgs/{org}
Schema-valid request rejected+1 moreless
  • Undocumented status code
211

Undocumented status codeST103

Received: 422
Documented: 200, 404
Response422 Unprocessable Content
{"message":"[]: jsontext: invalid character '\\x00' at start of value","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d $'\x00' http://0.0.0.0:41459/api/v1/orgs/workbench

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 3 additional properties not defined in the schema (`½Ï7øˆ¤7É´¥򔸯`, `none`, `󨉌`). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.
Response422 Unprocessable Content
{"message":"email address is invalid: DÑ","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"none": {}, "\udb60\ude4c": [false], "\u0019\u00bd\u00cf7\u00f8\u0088\u00a47\u00c9\u00b4\u00a5\uda13\ude2f": {}, "website": "", "description": "W\u00abR", "visibility": "public", "repo_admin_change_team_access": false, "location": "", "full_name": "admin/demo", "email": "D\u00d1"}' http://0.0.0.0:41459/api/v1/orgs/workbench
GET/orgs/{org}/actions/jobs
Schema-valid request rejected+1 moreless
  • Schema-violating request accepted
268

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response400 Bad Request
{"message":"invalid status \u0004'𠦻","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/orgs/workbench/actions/jobs?page=91629900357&limit=341&status=%04%27%F0%A0%A6%BB'

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - violates `type` at /properties/page (was integer, became string)
Response200 OK
{"jobs":[],"total_count":0}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/orgs/workbench/actions/jobs?page='
GET/orgs/{org}/actions/runners/{runner_id}Missing test data
Undocumented Content-Type+1 moreless
  • Undocumented status code
293

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/actions/runners/0

Undocumented status codeST103

Received: 401
Documented: 200, 400, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization;' 'http://0.0.0.0:41459/api/v1/orgs/workbench/actions/runners/0?access_token=%27%2A%15'
DELETE/orgs/{org}/actions/secrets/{secretname}
Missing Content-Type header+1 moreless
  • Undocumented Content-Type
30

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/actions/secrets/True

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/actions/secrets/MalformedJson
DELETE/orgs/{org}/actions/variables/{variablename}
Missing Content-Type header+1 moreless
  • Undocumented Content-Type
178

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/actions/variables/0

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/actions/variables/h
GET/orgs/{org}/actions/variables/{variablename}
Undocumented Content-Type+1 moreless
  • Undocumented status code
275

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/actions/variables/0

Undocumented status codeST103

Received: 401
Documented: 200, 400, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization;' 'http://0.0.0.0:41459/api/v1/orgs/workbench/actions/variables/%C2%A2%C3%A7%E1%92%84%F2%95%85%A5%C3%A7u%F0%9A%95%B7%C2%8F%C3%BD%C3%A4v%C2%A0%C2%B2?token=yP6c69usmOd9zjUQWO7NkzuOwbp0cbUP0U7JPsLV&access_token=%12%C3%A7%C2%86%F2%A9%81%91%F3%83%BC%8FO&sudo='

Undocumented status codeST103

Received: 403
Documented: 200, 400, 404
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'Authorization: H4ZweAGWnS!*JT`t' 'http://0.0.0.0:41459/api/v1/orgs/workbench/actions/variables/0?sudo=_'
DELETE/orgs/{org}/avatar
Missing Content-Type header+1 moreless
  • Undocumented Content-Type
256

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/avatar

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/avatar
GET/orgs/{org}/blocks
Schema-violating request accepted+1 moreless
  • Undocumented status code
267

Undocumented status codeST103

Received: 404
Documented: 200
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/orgs/0/blocks?page=0&limit=0'

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - violates `type` at /properties/page (was integer, became string)
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/orgs/workbench/blocks?page=%C2%93%1D%C2%AA%C2%AC%C2%89%C2%93'
GET/orgs/{org}/blocks/{username}Missing test data
Missing Content-Type header+1 moreless
  • Undocumented Content-Type
263

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/blocks/admin

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response404 Not Found
<EMPTY>
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/blocks/admin
GET/orgs/{org}/hooks
Schema-violating request accepted+1 moreless
  • Undocumented status code
244

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `limit` in query - violates `type` at /properties/limit (was integer, became string)
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/orgs/workbench/hooks?page=-23938772&limit=%F3%9F%9E%AA'

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: L9N.4' 'http://0.0.0.0:41459/api/v1/orgs/workbench/hooks?page=1795099&token=Eh%C3%80w%C2%B5&sudo=&limit=115608&access_token='
DELETE/orgs/{org}/labels/{id}
Missing Content-Type header+1 moreless
  • Undocumented Content-Type
277

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/labels/1

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/labels/1
PATCH/orgs/{org}/projects/{id}/columns/{column_id}Missing test data
Schema-valid request rejected+1 moreless
  • Undocumented Content-Type
301

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"sorting": 0}' http://0.0.0.0:41459/api/v1/orgs/workbench/projects/1/columns/2

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 5 additional properties not defined in the schema (``, `;ò/2x˜{Ë`, `\` and 2 more). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.
Response422 Unprocessable Content
{"message":"[Title]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\ud840\udc93\u007f<": {}, "": [[9.957685204682574e-141, -1.7976931348623157e+308]], "\\": {}, ";\u00f2/2x\u0098{\u00cb": [false], "\uda11\udc0fU": [null, -976, null], "title": "", "color": "00aabb", "sorting": 0}' http://0.0.0.0:41459/api/v1/orgs/workbench/projects/1/columns/4043325951
GET/orgs/{org}/projects/{id}/columns/{column_id}/issuesMissing test data
Undocumented Content-Type+1 moreless
  • Undocumented status code
314

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/projects/1/columns/1/issues

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: MalformedJson' 'http://0.0.0.0:41459/api/v1/orgs/workbench/projects/1/columns/10774400195/issues?token=gdt_D9OBLlvCu3V3p31uTnFn6KRHrh2E1vB5qjEi1wJKswb&page=2863378069392537&sudo=&access_token=%C2%9D%F3%B0%B9%A7ulk%07%C2%9E%C3%A9&limit=-9103'
DELETE/orgs/{org}/public_members/{username}
Missing Content-Type header+1 moreless
  • Undocumented Content-Type
66

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/public_members/admin

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/public_members/admin
PUT/orgs/{org}/public_members/{username}
Missing Content-Type header+1 moreless
  • Undocumented status code
229

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/public_members/admin

Undocumented status codeST103

Received: 401
Documented: 204, 403, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: mc418t_TRJs$=3 06q' 'http://0.0.0.0:41459/api/v1/orgs/%F3%82%8F%BA%0B%C2%A1%09E%C3%90%F3%96%8E%AEa%C3%90/public_members/admin?access_token=%C2%BEq%3AM%F1%A5%AD%87&token=nNmUoOJ6Y6N14y0utuU3rLUxJjMRkQyKiekJ8Yv1&sudo=%C3%AB%C3%A6%F2%AA%83%91%C2%B1%C2%8E'
DELETE/orgs/{org}/repos
Missing Content-Type header+1 moreless
  • Undocumented Content-Type
264

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/repos

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response202 Accepted
<EMPTY>
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/repos
PUT/repos/{owner}/{repo}/actions/secrets/{secretname}Missing test data
Schema-valid request rejected+1 moreless
  • Undocumented status code
299

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 201, 204, 400, 404
Response422 Unprocessable Content
{"message":"[Data]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"data": ""}' http://0.0.0.0:41459/api/v1/repos/admin/demo/actions/secrets/0

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 1 additional property not defined in the schema (`–`). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.
Response400 Bad Request
{"message":"name must start with a letter or underscore and contain only letters, numbers, and underscores","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\u0096": -321529240, "data": "\u009c\u00fd"}' http://0.0.0.0:41459/api/v1/repos/admin/demo/actions/secrets/%C2%AA%24%F0%A1%8D%A5%C3%8E%C3%95%12v%C2%98%C2%9F
PUT/repos/{owner}/{repo}/actions/variables/{variablename}Missing test data
Schema-valid request rejected+1 moreless
  • Undocumented status code
282

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 201, 204, 400, 404
Response422 Unprocessable Content
{"message":"[Value]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"value": ""}' http://0.0.0.0:41459/api/v1/repos/admin/demo/actions/variables/0
GET/repos/{owner}/{repo}/archive/{archive}Missing test data
Schema-valid request rejected+1 moreless
  • Undocumented status code
304

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 400
Documented: 200, 404
Response400 Bad Request
{"message":"unknown format: 0","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/archive/0

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization;' -H 'Sudo: l:z\?I(c^' -H 'X-GITEA-OTP: TRUE' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/archive/%F2%9C%8A%90%3D%F1%A7%82%A3%C3%94%C2%8D%0BeZ?access_token=q%F2%A9%AC%8A%F3%A9%B4%BB&sudo=&token=p6&path=&path=%F1%87%AF%BD&path=xv%F3%A5%97%B7k%C2%A6%F0%AB%BC%A2&path=%2F'
DELETE/repos/{owner}/{repo}/avatar
Missing Content-Type header+1 moreless
  • Undocumented status code
312

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/avatar

Undocumented status codeST103

Received: 401
Documented: 204, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'X-GITEA-OTP: g' -H 'Sudo: IgnoredAuth' -H 'Authorization: ?' 'http://0.0.0.0:41459/api/v1/repos/admin/%C3%86%C3%B0/avatar?access_token=Q%F2%9E%9D%9D%C3%B0%C3%96%C3%B0%21f%C2%9B%F0%A1%B4%949%C3%8F%C2%BF%C2%83%F2%B8%9D%BEE'

Undocumented status codeST103

Received: 403
Documented: 204, 404
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X DELETE -H 'X-GITEA-OTP: g' -H 'Sudo: IgnoredAuth' -H 'Authorization: ?' http://0.0.0.0:41459/api/v1/repos/admin/%C3%86%C3%B0/avatar
PUT/repos/{owner}/{repo}/branches/{branch}Missing test data
Schema-valid request rejected+1 moreless
  • Undocumented status code
287

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/branches/3k%F3%9C%B5%97%03

Undocumented status codeST103

Received: 401
Documented: 204, 403, 404, 409, 422
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: &nDL' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/branches/%C3%8E%C2%BA%10?sudo=x&access_token=%F1%B8%90%A8'
GET/repos/{owner}/{repo}/collaborators
Schema-violating request accepted+1 moreless
  • Undocumented status code
331

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: ;' -H 'Sudo: Lap[#w/' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/collaborators?limit=267847&access_token=%13%C2%8Dp&page=-17692541769400839900758016&sudo=&token=gdt_FgbJia27VFWIHiqc8JYzGxw37Xj9bXf5EkZXSqWQwyv'

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - violates `type` at /properties/page (was integer, became string)
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/collaborators?page=MissingContentType'

Undocumented status codeST103

Received: 403
Documented: 200, 404
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'Authorization: ;' -H 'Sudo: Lap[#w/' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/collaborators?access_token=&limit=0&page=0&sudo='
GET/repos/{owner}/{repo}/file-contentsMissing test data
Schema-valid request rejected+1 moreless
  • Undocumented status code
297

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 400
Documented: 200, 404
Response400 Bad Request
{"message":"invalid body parameter","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/file-contents?body=Workbench'
PATCH/repos/{owner}/{repo}/issues/comments/{id}Missing test data
Schema-valid request rejected+1 moreless
  • Undocumented status code
279

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 200, 204, 403, 404, 423
Response422 Unprocessable Content
{"message":"[Body]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"body": "Workbench"}' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/comments/1
DELETE/repos/{owner}/{repo}/issues/{index}
Missing Content-Type header+1 moreless
  • Undocumented Content-Type
312

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/issues/-9223372036854775809
PATCH/repos/{owner}/{repo}/issues/{index}/comments/{id}Missing test data
Schema-valid request rejected+1 moreless
  • Undocumented status code
304

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 200, 204, 403, 404
Response422 Unprocessable Content
{"message":"[Body]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"body": "Workbench"}' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/comments/1
PUT/repos/{owner}/{repo}/issues/{index}/labels
Schema-valid request rejected+1 moreless
  • Undocumented status code
319

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 1 additional property not defined in the schema (``). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.

Undocumented status codeST103

Received: 400
Documented: 200, 403, 404
Response400 Bad Request
{"message":"a label must be an integer or a string","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"\u0017": {"@\u00d1": true, "\ud9f7\udc86h": 1687, "\u0088\u001e2\u00b3\u009a\u00cfN\u00f1&\ud98b\udc16\u00a6\u00e6\u00dfy\ud934\udc15\u0090\u00ca7": [-1.4368981778628937e+286]}, "labels": [{"P\u00b8\u0018\u00dd\u00a7\u00badJ\u0018\u000f\u0011\u00ef\u00e7": -369271270}, {"\u00c0": {"\u00d1\u0081\u00d5\u0006\u00bcQ\u00da\u0007": "\u001bua\uda4a\udf84\ud9c4\udfc6$\ud8de\ude60\u0018\u0003"}}, {}, [{}]]}' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/labels

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 200, 403, 404
Response422 Unprocessable Content
{"message":"[]: Unsupported Content-Type","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/labels
GET/repos/{owner}/{repo}/notifications
Schema-violating request accepted+1 moreless
  • Undocumented status code
390

Undocumented status codeST103

Received: 404
Documented: 200
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/0/0/notifications?all=true&status-types=&subject-type=issue&since=2000-01-01T00%3A00%3A00Z&before=2000-01-01T00%3A00%3A00Z&page=0&limit=0'

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameters `subject-type`, `page` in query
  - violates `type` at /properties/subject-type (was array, became null)
  - violates `type` at /properties/page (was integer, became number)
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/notifications?page=4.5253042462487635e-203&subject-type=null'

Undocumented status codeST103

Received: 422
Documented: 200
Response422 Unprocessable Content
{"message":"parsing time \".\\xc3\\xa7H\\x0b\\xf2\\x85\\x94\\x9a\\xc3\\x86\\xc3\\x87\\xc2\\xbb\\xc3\\xbb\\xf3\\x9f\\x86\\x9e\\x1c\\x1f\" as \"2006-01-02T15:04:05Z07:00\": cannot parse \".\\xc3\\xa7H\\x0b\\xf2\\x85\\x94\\x9a\\xc3\\x86\\xc3\\x87\\xc2\\xbb\\xc3\\xbb\\xf3\\x9f\\x86\\x9e\\x1c\\x1f\" as \"2006\"","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/notifications?limit=65&since=.%C3%A7H%0B%F2%85%94%9A%C3%86%C3%87%C2%BB%C3%BB%F3%9F%86%9E%1C%1F&all=true&before=6702-12-07T01%3A37%3A55-03%3A42&subject-type=%C3%A5%C3%B8%12%C3%88-%C2%BB%C3%8D%C3%96%28%27%F3%B2%80%87%0F%F4%88%B8%99%C3%97%C3%A6%F0%AA%B5%87%C3%81&subject-type=&subject-type=%7F%170a&subject-type=%28'
PUT/repos/{owner}/{repo}/notifications
Schema-violating request accepted+1 moreless
  • Undocumented status code
332

Undocumented status codeST103

Received: 404
Documented: 205
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/0/0/notifications?all=&status-types=&to-status=&last_read_at=2000-01-01T00%3A00%3A00Z'

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `last_read_at` in query - violates `format` at /properties/last_read_at
Response205 Reset Content
[]
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/notifications?to-status=%C2%87%C3%9A%2F&last_read_at=&all=%12&status-types=%C2%A1%C2%8C&status-types=%F3%98%88%92%C3%B5%C2%B2%C2%B1%F0%96%B6%88%2C%03%C3%8B%C3%93%F1%8C%93%9Bp%C3%94%5E&status-types=%C3%8C&status-types=&status-types=%E1%90%BA%C2%AA~'

Undocumented status codeST103

Received: 400
Documented: 205
Response400 Bad Request
{"message":"parsing time \"t\\xc3\\xb8\\xf1\\xaf\\xab\\xb2[\" as \"2006-01-02T15:04:05Z07:00\": cannot parse \"t\\xc3\\xb8\\xf1\\xaf\\xab\\xb2[\" as \"2006\"","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/notifications?last_read_at=t%C3%B8%F1%AF%AB%B2%5B'
GET/repos/{owner}/{repo}/signing-key.gpg
Undocumented Content-Type+1 moreless
  • Undocumented status code
296

Undocumented Content-TypeST105

Received: application/json;charset=utf-8
Documented: text/plain

Undocumented status codeST103

Received: 404
Documented: 200
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/signing-key.gpg
GET/repos/{owner}/{repo}/signing-key.pub
Undocumented Content-Type+1 moreless
  • Undocumented status code
298

Undocumented Content-TypeST105

Received: application/json;charset=utf-8
Documented: text/plain

Undocumented status codeST103

Received: 404
Documented: 200
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/signing-key.pub
GET/repos/{owner}/{repo}/teamsMissing test data
Schema-valid request rejected+1 moreless
  • Undocumented status code
296

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 405
Documented: 200, 404
Response405 Method Not Allowed
{"message":"repo is not owned by an organization","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/teams
GET/repos/{owner}/{repo}/teams/{team}Missing test data
Schema-valid request rejected+1 moreless
  • Undocumented status code
291

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response405 Method Not Allowed
{"message":"repo is not owned by an organization","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/teams/0

Undocumented status codeST103

Received: 401
Documented: 200, 404, 405
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Sudo: y"c' -H 'Authorization: UseAfterFree' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/teams/0?token=y4PpAVhvitJhDNjIbHHGFXAsuqTKHG8a0zShyEHK'

Undocumented status codeST103

Received: 403
Documented: 200, 404, 405
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'Authorization: UseAfterFree' -H 'Sudo: y"c' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/teams/0?access_token='
PUT/repos/{owner}/{repo}/topics
Missing Content-Type header+1 moreless
  • Schema-valid request rejected
300

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/repos/admin/demo/topics

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Hint: The request body contains 2 additional properties not defined in the schema (``, `·󉋪šE«®`¬_¯`). The server appears to reject properties the schema allows. Declare `additionalProperties: false` if extras are not accepted, or make the server ignore unknown fields.
Response422 Unprocessable Content
{"invalidTopics":["𶜲v"],"message":"Topic names are invalid"}
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"": {";\u00bd\u00d5": -596259}, "\u00b7\udae4\udeea\u009aE\u00ab\u00ae`\u00ac_\b\u00af": {"": null, "\u001b": {"s\udb97\udebd": null}, "\u00e5": []}, "topics": ["Z", "", "\ud899\udf32V"]}' http://0.0.0.0:41459/api/v1/repos/admin/demo/topics
PUT/repos/{owner}/{repo}/topics/{topic}
Missing Content-Type header+1 moreless
  • Schema-valid request rejected
299

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/topics/0

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"invalidTopics":"򘿲","message":"Topic name is invalid"}
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/topics/%F2%98%BF%B2
PATCH/repos/{owner}/{repo}/wiki/page/{pageName}
Schema-valid request rejected+1 moreless
  • Undocumented status code
285

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 422
Documented: 200, 400, 403, 404, 423
Response422 Unprocessable Content
{"message":"[Title]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/repos/admin/demo/wiki/page/0

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response400 Bad Request
{"message":"illegal base64 data at input byte 0","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"title": "\u00b3<\u00f3k\u008a\u0001", "content_base64": "$\u00c8"}' http://0.0.0.0:41459/api/v1/repos/admin/demo/wiki/page/%F3%90%B6%91C%C2%88
GET/signing-key.gpg
Undocumented Content-Type+1 moreless
  • Undocumented status code
280

Undocumented Content-TypeST105

Received: application/json;charset=utf-8
Documented: text/plain

Undocumented status codeST103

Received: 404
Documented: 200
Response404 Not Found
{"message":"no signing key","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/signing-key.gpg

Undocumented status codeST103

Received: 403
Documented: 200
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'Sudo: C#' -H 'Authorization: Plthk_' http://0.0.0.0:41459/api/v1/signing-key.gpg
GET/signing-key.pub
Undocumented Content-Type+1 moreless
  • Undocumented status code
303

Undocumented Content-TypeST105

Received: application/json;charset=utf-8
Documented: text/plain

Undocumented status codeST103

Received: 404
Documented: 200
Response404 Not Found
{"message":"no signing key","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/signing-key.pub
GET/user/actions/jobs
Schema-valid request rejected+1 moreless
  • Schema-violating request accepted
570

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response400 Bad Request
{"message":"invalid status ","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/actions/jobs?status=&page=0&limit=0&sort=&order='

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
{"jobs":[],"total_count":0}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/actions/jobs?page=null&page=null'

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"Invalid sort order: \"-8×\\u0088âßW𩿠\"","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/actions/jobs?limit=-76703&sort=%F1%85%83%A5%C3%82%3E&page=-1414403&order=-8%C3%97%C2%88%C3%A2%C3%9FW%F0%A9%BF%A0'
DELETE/user/avatar
Missing Content-Type header+1 moreless
  • Undocumented status code
170

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/avatar

Undocumented status codeST103

Received: 403
Documented: 204
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X DELETE -H 'Sudo: H0' -H 'Authorization: ~+na.r91dfTY+87' -H 'X-GITEA-OTP;' 'http://0.0.0.0:41459/api/v1/user/avatar?sudo=1%2F0'

Undocumented status codeST103

Received: 401
Documented: 204
Response401 Unauthorized
{"message":"token is required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'X-GITEA-OTP;' -H 'Authorization: 1/0' http://0.0.0.0:41459/api/v1/user/avatar
GET/user/blocks
Schema-violating request accepted+1 moreless
  • Undocumented status code
533

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/blocks?page=null&page=null'

Undocumented status codeST103

Received: 401
Documented: 200
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'X-GITEA-OTP: mhk-Jw' -H 'Authorization: 7' 'http://0.0.0.0:41459/api/v1/user/blocks?limit=13001231589&access_token=M%F0%9B%B7%9DW%C3%9A%F0%B5%96%BD%C3%88%C3%90%27%3A%C2%9F%C2%94Z%21%C2%B0%C2%A6&token=&page=62691389&sudo=%F3%8C%A2%81L%C2%AD%05%F2%89%B0%85Z'
DELETE/user/blocks/{username}Missing test data
Schema-valid request rejected+1 moreless
  • Undocumented status code
292

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx

Undocumented status codeST103

Received: 400
Documented: 204, 404, 422
Response400 Bad Request
{"message":"cannot unblock the user","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/blocks/admin
GET/user/blocks/{username}Missing test data
Missing Content-Type header+1 moreless
  • Undocumented Content-Type
283

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response404 Not Found
<EMPTY>
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/blocks/admin

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/blocks/0
GET/user/following/{username}
Missing Content-Type header+1 moreless
  • Undocumented status code
292

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/following/workbench-user

Undocumented status codeST103

Received: 401
Documented: 204, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: 6>U~;=#``V' 'http://0.0.0.0:41459/api/v1/user/following/admin?sudo=%F4%8C%BE%A1%F1%A7%B1%A1%0B&access_token=%C3%BE%1A%C3%B0U%C3%97%C2%AB%0D%C2%96%5E2&token=gdt_D9OBLlvCu3V3p31uTnFn6KRHrh2E1vB5qjEi1wJKswb'
DELETE/user/gpg_keys/{id}
Missing Content-Type header+1 moreless
  • Schema-violating request accepted
311

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/gpg_keys/-9223372036854775808

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `id` in path - violates `format`, `minimum`, `maximum` at /properties/id
Response204 No Content
<EMPTY>
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/gpg_keys/-9223372036854775809
GET/user/orgs
Schema-violating request accepted+1 moreless
  • Undocumented status code
331

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
[{"id":3,"name":"workbench","full_name":"","email":"","avatar_url":"http://0.0.0.0:41459/avatars/1f303fd10424e23d36ee4dbd6af13c4d735f75bfe318b1259474fa53863403ba","description":"","website":"","location":"","visibility":"public","repo_admin_change_team_access":false,"username":"workbench"}]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/orgs?page=null&page=null'

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Km' 'http://0.0.0.0:41459/api/v1/user/orgs?access_token=%CE%A9%E2%89%88%C3%A7%E2%88%9A%E2%88%AB%CB%9C%C2%B5%E2%89%A4%E2%89%A5%C3%B7%C3%A5%C3%9F%E2%88%82%C6%92%C2%A9%CB%99%E2%88%86%CB%9A%C2%AC%E2%80%A6%C3%A6%C5%93%E2%88%91%C2%B4%C2%AE%E2%80%A0%C2%A5%C2%A8%CB%86%C3%B8%CF%80%E2%80%9C%E2%80%98%C2%A1%E2%84%A2%C2%A3%C2%A2%E2%88%9E%C2%A7%C2%B6%E2%80%A2%C2%AA%C2%BA%E2%80%93%E2%89%A0%C2%B8%CB%9B%C3%87%E2%97%8A%C4%B1%CB%9C%C3%82%C2%AF%CB%98%C2%BF%C3%85%C3%8D%C3%8E%C3%8F%CB%9D%C3%93%C3%94%EF%A3%BF%C3%92%C3%9A%C3%86%E2%98%83%C5%92%E2%80%9E%C2%B4%E2%80%B0%CB%87%C3%81%C2%A8%CB%86%C3%98%E2%88%8F%E2%80%9D%E2%80%99%60%E2%81%84%E2%82%AC%E2%80%B9%E2%80%BA%EF%AC%81%EF%AC%82%E2%80%A1%C2%B0%C2%B7%E2%80%9A%E2%80%94%C2%B1&page=5552&limit=-536870913&sudo=&token='

Undocumented status codeST103

Received: 403
Documented: 200, 404
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'Sudo: L-.#'"'"'<K3' -H 'Authorization;' -H 'X-GITEA-OTP;' http://0.0.0.0:41459/api/v1/user/orgs
GET/user/starred
Schema-violating request accepted+1 moreless
  • Undocumented status code
527

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/starred?page=null&page=null'

Undocumented status codeST103

Received: 401
Documented: 200, 403
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: 9E|!b#1z%&;GfL)9iyR&{6P8Jj&ex' 'http://0.0.0.0:41459/api/v1/user/starred?access_token=p%C3%91%C3%BA%C2%90&page=-20400887616574296064&limit=3240&sudo=%F1%A6%80%BC%C3%B1%C3%90%C3%A3%C2%93&token=mpYCAsc2DCDBmuQnwIIBOysl5OYQzqYdN2sB9YVo'
GET/user/stopwatches
Schema-violating request accepted+1 moreless
  • Undocumented status code
338

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/stopwatches?page=null&page=null'

Undocumented status codeST103

Received: 401
Documented: 200
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: :' 'http://0.0.0.0:41459/api/v1/user/stopwatches?token=gdt_XBh3cShtrb7CLSDZD6vE0v7kxiEUeqWktYMtAFxTbCP&access_token=u&sudo=%E1%9A%9B%E1%9A%84%E1%9A%93%E1%9A%90%E1%9A%8B%E1%9A%92%E1%9A%84%E1%9A%80%E1%9A%91%E1%9A%84%E1%9A%82%E1%9A%91%E1%9A%8F%E1%9A%85%E1%9A%9C&page=72950&limit=115254'
GET/users/{username}/following/{target}
Missing Content-Type header+1 moreless
  • Undocumented Content-Type
356

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/users/admin/following/0

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/users/admin/following/0
GET/users/{username}/gpg_keys
Schema-violating request accepted+1 moreless
  • Undocumented Content-Type
375

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameters `page`, `limit` in query
  - violates `type` at /properties/page (was integer, became object)
  - violates `type` at /properties/limit (was integer, became object)
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/users/admin/gpg_keys?page=_%C2%9Do&page=%F2%9A%9F%B9%E6%BF%B1M%C3%A7%C2%87%C2%B6G&limit=%C2%BDo%C2%99&limit=4%0A%C2%92%F1%94%AD%96%3F%28%C3%A9%C3%92%C3%8266%10%C3%AF%7D%C3%B0L%F3%BC%B6%89%F0%90%8F%BE%C3%977%C3%A2%F1%A2%A3%BA%C3%8A&limit=%F2%A7%92%80%C3%BC%03%C2%A4-Y%0BQ%7B&limit=%C2%95'

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
  1. GET/user/emails
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/emails
  2. GET/users/0/gpg_keysfailed here
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/users/0/gpg_keys?limit=16417'
GET/users/{username}/keys
Schema-violating request accepted+1 moreless
  • Undocumented Content-Type
373

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
  1. GET/user/emails
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/emails
  2. GET/users/0/keysfailed here
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/users/0/keys?page=-8&limit=152'

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - violates `type` at /properties/page (was integer, became object)
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/users/admin/keys?page=%1A&page=False&page=UndefinedStatusCode&page=%12z%C3%99Y%F1%96%A9%A2P&page=&page=B%C2%9A%03%F3%91%B5%82z%C2%8E%C3%ACu%C3%9E%F1%A8%A3%86%22%C3%A7%1F2%C2%B2%C2%9D%06%2B%F2%9D%A4%B2C%C3%AE%C2%BC&page=%E0%AB%94Z%C3%B6%F0%A8%B8%9F&page=l%F0%B7%A7%A4c%C3%B3%F2%94%9B%AB%F3%87%97%8D%C3%ACD%07%F2%84%B2%97%C3%A9J%5DU%C3%A1%10%C3%B6%C2%A5%C3%A6%F1%AB%85%A0&page=0%F4%87%9D%8B%C3%86&page=%F2%8A%AE%B3%C2%A4&page=%F1%85%9B%8A%C3%B6%C2%A2%7C%0C%27&page=%E7%A0%A7%C2%81%C2%98&limit=15629&fingerprint=%C3%A9'
GET/users/{username}/starred
Schema-violating request accepted+1 moreless
  • Undocumented Content-Type
390

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `limit` in query - violates `type` at /properties/limit (was integer, became string)
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/users/admin/starred?limit=zw%C2%97%C3%B7C'

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
  1. GET/user/emails
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/emails
  2. GET/users/0/starredfailed here
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/users/0/starred?limit=-3533240241358'
GET/admin/actions/runnersSchema-violating request accepted607

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `disabled` in query - disabled: Incorrect type
Response200 OK
{"runners":[],"total_count":0}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/admin/actions/runners?disabled=null&disabled=null'
GET/admin/cronSchema-violating request accepted333

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
[{"name":"update_mirrors","schedule":"@every 10m","next":"2026-10-19T12:05:07Z","prev":"0001-01-01T00:00:00Z","exec_times":0},{"name":"repo_health_check","schedule":"@midnight","next":"2026-10-20T00:00:00Z","prev":"0001-01-01T00:00:00Z","exec_times":0},{"name":"check_repo_stats","schedule":"@midnight","next":"2026-10-20T00:00:00Z","prev":"2026-10-19T11:55:07.228483277Z","exec_times":1},{"name":"archive_cleanup","schedule":"@midnight","next":"2026-10-20T00:00:00Z","prev":"2026-10-19T11:55:07.228478979Z","exe // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/admin/cron?page=null&page=null'

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
[{"email":"admin@example.com","verified":true,"primary":true,"user_id":1,"username":"admin"},{"email":"workbench@example.com","verified":true,"primary":true,"user_id":2,"username":"workbench-user"}]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/admin/emails/search?page=null&page=null'
DELETE/admin/hooks/{id}Undocumented status code298

Undocumented status codeST103

Received: 404
Documented: 204
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/admin/hooks/-9223372036854775808
GET/admin/hooks/{id}Undocumented status code309

Undocumented status codeST103

Received: 404
Documented: 200
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/admin/hooks/-9223372036854775808

Undocumented status codeST103

Received: 401
Documented: 200
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Gf' 'http://0.0.0.0:41459/api/v1/admin/hooks/1?token=7%C2%BD%C3%8F%C3%B0%2C%C3%B2A%08%C2%96&access_token='
GET/admin/unadoptedSchema-violating request accepted326

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/admin/unadopted?page=null&page=null'
DELETE/admin/unadopted/{owner}/{repo}Undocumented status code290

Undocumented status codeST103

Received: 404
Documented: 204, 403
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/admin/unadopted/0/0
GET/admin/users/{username}/badgesUndocumented Content-Type346

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
  1. GET/user/emails
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/emails
  2. GET/admin/users/0/badgesfailed here
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/admin/users/0/badges
DELETE/admin/users/{username}/keys/{id}Missing test dataUndocumented Content-Type359

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/admin/users/workbench/keys/1
GET/notifications/newUndocumented status code316

Undocumented status codeST103

Received: 401
Documented: 200
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'X-GITEA-OTP: '"'"'I5' -H 'Sudo: `)N^' -H 'Authorization: s)IMWrP4i8' 'http://0.0.0.0:41459/api/v1/notifications/new?access_token=u%C3%92%F2%98%A1%B2OET%C3%A4C%F0%94%AC%A0%F3%8F%94%B2'

Undocumented status codeST103

Received: 403
Documented: 200
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'Authorization;' -H 'Sudo: `)N^' -H 'X-GITEA-OTP: '"'"'I5' http://0.0.0.0:41459/api/v1/notifications/new
PATCH/notifications/threads/{id}Missing test dataUndocumented status code295

Undocumented status codeST103

Received: 401
Documented: 205, 403, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: 2D' -H 'X-GITEA-OTP;' -H 'Sudo: .' 'http://0.0.0.0:41459/api/v1/notifications/threads/8caabe76280791ab362a270cac3b5484415dc5ec?to-status=&access_token=&token=y4PpAVhvitJhDNjIbHHGFXAsuqTKHG8a0zShyEHK&sudo=%C2%81%C3%B3%C2%97%C3%A9%F1%8A%81%9B'
GET/orgs/{org}/actions/runnersUndocumented status code260

Undocumented status codeST103

Received: 401
Documented: 200, 400, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: ljM'"'"'('"'"'7W?~4pL[2;' -H 'Sudo: 3"9B{H8qrJ&Ek>' 'http://0.0.0.0:41459/api/v1/orgs/workbench/actions/runners?access_token=%C3%AD%C3%A1%C3%B4%F3%BF%B9%A5'
DELETE/orgs/{org}/actions/runners/{runner_id}Missing test dataUndocumented Content-Type279

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/actions/runners/0
PATCH/orgs/{org}/actions/runners/{runner_id}Missing test dataUndocumented Content-Type281

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"disabled": false}' http://0.0.0.0:41459/api/v1/orgs/workbench/actions/runners/0
GET/orgs/{org}/actions/secretsSchema-violating request accepted260

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `limit` in query - violates `type` at /properties/limit (was integer, became object)
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/orgs/workbench/actions/secrets?limit=%3E%F2%A2%88%99%F3%A4%AA%9C%F2%81%A0%91%F2%92%82%91&limit=%5B%C2%BA%C2%A9%C2%87%F2%B5%A8%91%F1%BD%B9%B4%5B%1Fg%F3%96%9E%AB%25%13%F0%AF%AE%8F%C2%BAs%C2%BB%25q%10%C3%95%C3%98%3E6K%C3%AB&limit=%3F%F1%A2%8F%90%1Am%C3%A8%C2%A0o%F1%AF%8F%AC&limit=&limit=%C2%99%C3%B6%22N%C3%BC+%F2%A3%9C%A9%C2%92%3E%C3%8E%C3%B4&limit=UndefinedContentType&limit=%F3%A4%A1%BAR%C2%94%C3%8E&page=239049239969961952'
DELETE/orgs/{org}/hooks/{id}Missing test dataUndocumented Content-Type274

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/hooks/1
GET/orgs/{org}/hooks/{id}Missing test dataUndocumented Content-Type278

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/hooks/1
GET/orgs/{org}/labels/{id}Missing test dataUndocumented Content-Type275

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/labels/1
PATCH/orgs/{org}/labels/{id}Missing test dataUndocumented Content-Type308

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/orgs/workbench/labels/1
DELETE/orgs/{org}/projects/{id}Missing test dataUndocumented Content-Type225

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/projects/1
GET/orgs/{org}/projects/{id}Missing test dataUndocumented Content-Type278

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/projects/1
PATCH/orgs/{org}/projects/{id}Missing test dataUndocumented Content-Type305

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"state": "open"}' http://0.0.0.0:41459/api/v1/orgs/workbench/projects/1
GET/orgs/{org}/projects/{id}/columnsMissing test dataUndocumented Content-Type300

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/projects/1/columns
DELETE/orgs/{org}/projects/{id}/columns/{column_id}Missing test dataUndocumented Content-Type200

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/projects/1/columns/2
GET/orgs/{org}/projects/{id}/columns/{column_id}Missing test dataUndocumented Content-Type277

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/projects/1/columns/1
DELETE/orgs/{org}/projects/{id}/columns/{column_id}/issues/{issue_id}Missing test dataUndocumented Content-Type289

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/projects/1/columns/1/issues/2
GET/orgs/{org}/public_members/{username}Missing test dataUndocumented Content-Type260

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/workbench/public_members/admin
GET/packages/{owner}Schema-violating request accepted358

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameters `page`, `type` in query
  - violates `type` at /properties/page (was integer, became number)
  - violates `enum` at /properties/type
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/packages/admin?page=-2.225073858507e-311&type=X'
DELETE/packages/{owner}/{type}/{name}Missing test dataUndocumented status code189

Undocumented status codeST103

Received: 401
Documented: 204, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization: NULL' 'http://0.0.0.0:41459/api/v1/packages/admin/organization/0?sudo=%C2%BC%F0%9C%BC%B9%F2%91%95%9D%F3%92%B7%A7%E0%B7%A3%C3%AC0&access_token=%C2%B9%C2%8F%F2%8B%B2%BC%F2%88%94%B7'
DELETE/repos/{owner}/{repo}Missing Content-Type header177

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo
PATCH/repos/{owner}/{repo}Schema-violating request accepted630

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: in body - invalid syntax: random bytes
Response200 OK
{"id":1,"owner":{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":false,"prohibit_login":false,"location":"o\u0015$󆽳","website":"","description":"񶞪","visibility":"public","fo // Output truncated...
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d $'\x00' http://0.0.0.0:41459/api/v1/repos/admin/demo
GET/repos/{owner}/{repo}/actions/artifacts/{artifact_id}Missing test dataUndocumented Content-Type286

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/demo/actions/artifacts/W
GET/repos/{owner}/{repo}/actions/jobsSchema-valid request rejected328

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response400 Bad Request
{"message":"invalid status 2â󿥲¨򜦕m8񗦫©\u0019h򬥸÷","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/actions/jobs?status=2%C3%A2%F3%BF%A5%B2%C2%A8%F2%9C%A6%95m8%F1%97%A6%AB%C2%A9%19h%F2%AC%A5%B8%C3%B7&limit=3786627'

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"Invalid sort mode: \"ÜýÒ\\x16\\u009bí\\U000d1f13|\\x0f³g\\x1auö\\x13\"","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/actions/jobs?limit=49534491&sort=%C3%9C%C3%BD%C3%92%16%C2%9B%C3%AD%F3%91%BC%93%7C%0F%C2%B3g%1Au%C3%B6%13&page=9657'
GET/repos/{owner}/{repo}/actions/jobs/{job_id}/logsMissing test dataUndocumented Content-Type296

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
  1. GET/admin/actions/jobs
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/admin/actions/jobs
  2. GET/repos/0/0/actions/jobs/false/logsfailed here
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/actions/jobs/false/logs
GET/repos/{owner}/{repo}/actions/runnersSchema-violating request accepted321

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `disabled` in query - violates `type` at /properties/disabled (was boolean, became integer)
Response200 OK
{"runners":[],"total_count":0}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/actions/runners?disabled=487697'
DELETE/repos/{owner}/{repo}/actions/runners/{runner_id}Missing test dataUndocumented Content-Type289

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/actions/runners/0
GET/repos/{owner}/{repo}/actions/runs/{run}/jobsMissing test dataUndocumented status code311

Undocumented status codeST103

Received: 401
Documented: 200, 400, 404, 422
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: __proto__' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/actions/runs/11394/jobs?sudo=%F4%8A%9D%81%F3%AE%8C%82w%C2%BB%C3%BC%F2%B4%87%B9%C3%92%3FG%C2%A0%C3%96%F0%A0%82%95%C2%96-%C3%BA%F2%B4%89%BE&sort=S%F1%89%9A%A0%C2%BE%C3%8A%C3%A9&token=%18%01ct&status=Wn%04W%C3%BD%C2%92QX&access_token='
GET/repos/{owner}/{repo}/actions/runs/{run}/logsUndocumented Content-Type293

Undocumented Content-TypeST105

Received: application/json;charset=utf-8
Documented: application/zip
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/actions/runs/0/logs
GET/repos/{owner}/{repo}/actions/secretsSchema-violating request accepted331

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - violates `type` at /properties/page (was integer, became array)
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/actions/secrets?page=false'
DELETE/repos/{owner}/{repo}/actions/secrets/{secretname}Missing test dataUndocumented status code284

Undocumented status codeST103

Received: 401
Documented: 204, 400, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Sudo: 3c[h#*' -H 'X-GITEA-OTP;' -H 'Authorization: >|' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/actions/secrets/0?access_token=%C3%95'
GET/repos/{owner}/{repo}/actions/variables/{variablename}Missing test dataUndocumented status code287

Undocumented status codeST103

Received: 401
Documented: 200, 400, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Sudo;' -H 'Authorization: y6gP]e53%' -H 'X-GITEA-OTP: I' 'http://0.0.0.0:41459/api/v1/repos/%C3%AA%F0%BF%94%91w%C3%8C%C2%95%1D%1E%C3%8A/demo/actions/variables/7%C3%8E%60%C3%84Y?access_token=%12%C2%BE%F0%95%BB%A5&token=y4PpAVhvitJhDNjIbHHGFXAsuqTKHG8a0zShyEHK&sudo=Um%F3%B5%87%A0%C3%91%C3%A7%C3%B5'
GET/repos/{owner}/{repo}/actions/workflowsUndocumented status code313

Undocumented status codeST103

Received: 401
Documented: 200, 400, 403, 404, 422, 500
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Sudo: \' -H 'X-GITEA-OTP: W[i_' -H 'Authorization: G1' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/actions/workflows?sudo=%7F&access_token=K%F2%9A%A2%A6'
PUT/repos/{owner}/{repo}/actions/workflows/{workflow_id}/enableMissing test dataUndocumented status code294

Undocumented status codeST103

Received: 401
Documented: 204, 400, 403, 404, 409, 422
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: V!SW!^' -H 'Sudo: Cio88$' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/actions/workflows/X%C2%9A%C3%B7/enable?access_token=%0E%27'
GET/repos/{owner}/{repo}/branch_protectionsUndocumented status code306

Undocumented status codeST103

Received: 404
Documented: 200
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/branch_protections
DELETE/repos/{owner}/{repo}/branches/{branch}Missing test dataUndocumented status code291

Undocumented status codeST103

Received: 401
Documented: 204, 403, 404, 423
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization: FIL810b0XI]7l' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/branches/%F2%8D%A0%9B%C2%A0?token=gdt_FgbJia27VFWIHiqc8JYzGxw37Xj9bXf5EkZXSqWQwyv&access_token=%1B&sudo=%1E%18%C2%82%27%02%C2%B3%F2%A1%A8%B6%F0%A5%82%96%F4%85%8F%A8'
GET/repos/{owner}/{repo}/branches/{branch}Missing test dataUndocumented status code286

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Sudo: P0s`=e+' -H 'Authorization;' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/branches/0?access_token=%C3%9C%C3%9E%C2%B7%F2%BF%B2%B51%7C%EE%95%87%28&token=%C2%A2Wm%C2%9Ap%C3%81&sudo='

Undocumented status codeST103

Received: 403
Documented: 200, 404
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'Authorization;' -H 'Sudo: P0s`=e+' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/branches/0?access_token=&token=&sudo='
PATCH/repos/{owner}/{repo}/branches/{branch}Missing test dataSchema-valid request rejected276

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"Cannot rename a branch using the same name or rename to a branch that already exists.","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"name": "\u0093"}' http://0.0.0.0:41459/api/v1/repos/admin/demo/branches/0
DELETE/repos/{owner}/{repo}/collaborators/{collaborator}Missing test dataSchema-valid request rejected282

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"user does not exist [uid: 0, name: 0]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/collaborators/0
GET/repos/{owner}/{repo}/collaborators/{collaborator}Missing test dataSchema-valid request rejected284

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"user does not exist [uid: 0, name: 0]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/collaborators/0
PUT/repos/{owner}/{repo}/collaborators/{collaborator}Missing test dataSchema-valid request rejected299

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"user does not exist [uid: 0, name: 0]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/repos/admin/demo/collaborators/0
GET/repos/{owner}/{repo}/commits/{ref}/statusMissing test dataUndocumented status code303

Undocumented status codeST103

Received: 401
Documented: 200, 400, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization;' -H 'Sudo;' 'http://0.0.0.0:41459/api/v1/repos/%C2%97%C2%B6%C3%B2%C3%B1/demo/commits/%7FF%F4%8A%9F%A2%C2%AE%C3%BA/status?token=%C3%9E&limit=602136712'
GET/repos/{owner}/{repo}/compare/{basehead}Missing test dataUndocumented status code339

Undocumented status codeST103

Received: 403
Documented: 200, 400, 404
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'X-GITEA-OTP: zxOV+:a' -H 'Authorization;' -H 'Sudo: h' http://0.0.0.0:41459/api/v1/repos/admin/demo/compare/%C3%B7
DELETE/repos/{owner}/{repo}/contents/{filepath}Missing test dataSchema-valid request rejected382

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"sha does not match [given: 8caabe76280791ab362a270cac3b5484415dc5ec, expected: e69de29bb2d1d6434b8b29ae775ad8c2e48c5391]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"sha": "8caabe76280791ab362a270cac3b5484415dc5ec"}' http://0.0.0.0:41459/api/v1/repos/admin/demo/contents/0
GET/repos/{owner}/{repo}/editorconfig/{filepath}Missing test dataUndocumented status code294

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization;' -H $'X-GITEA-OTP: e3:\t=c}<Uo`' -H 'Sudo: ,y' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/editorconfig/%C2%9CB%F2%83%BA%92F%27%1DZZ%F2%AC%A6%85?access_token=%C3%AE%18%F3%85%A6%BD&ref=%C2%88%00G'
GET/repos/{owner}/{repo}/git/notes/{sha}Missing test dataUndocumented status code321

Undocumented status codeST103

Received: 401
Documented: 200, 404, 422
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: M<cZ_q' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/git/notes/8caabe76280791ab362a270cac3b5484415dc5ec?verification=true&sudo=%F3%AE%AA%838Q%1F%1F1%25%18%C2%A2%C2%8B%F1%91%AE%B1%C3%B1&files=true&access_token=%C2%A8%C2%BD&token=y4PpAVhvitJhDNjIbHHGFXAsuqTKHG8a0zShyEHK'
GET/repos/{owner}/{repo}/git/tags/{sha}Missing test dataSchema-valid request rejected302

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response400 Bad Request
{"message":"object does not exist [id: 8caabe76280791ab362a270cac3b5484415dc5ec, rel_path: ]","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/git/tags/8caabe76280791ab362a270cac3b5484415dc5ec
GET/repos/{owner}/{repo}/hooksUndocumented status code325

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: `d'"'"'w' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/hooks?access_token=_%C2%AB%19%C2%B6%C2%BC%C2%B0%22%C3%B89%F0%A8%91%91%C2%87%01-.%F3%87%B9%93nM%C2%97K%1F&page=989392&sudo=%C2%8B&limit=-25980&token='
GET/repos/{owner}/{repo}/hooks/gitMissing test dataUndocumented status code303

Undocumented status codeST103

Received: 403
Documented: 200, 404
Response403 Forbidden
{"message":"must be allowed to edit Git hooks","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/hooks/git

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Sudo: timings' -H 'Authorization: @@' -H 'X-GITEA-OTP: -script.pyw' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/hooks/git?access_token=%F3%B1%B7%A8%F3%BB%8D%B1%C3%AA%17'
DELETE/repos/{owner}/{repo}/hooks/git/{id}Missing test dataUndocumented status code287

Undocumented status codeST103

Received: 403
Documented: 204, 404
Response403 Forbidden
{"message":"must be allowed to edit Git hooks","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/hooks/git/8caabe76280791ab362a270cac3b5484415dc5ec

Undocumented status codeST103

Received: 401
Documented: 204, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Sudo: uP8' -H 'X-GITEA-OTP: vGL' -H 'Authorization: 27^Yaa' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/hooks/git/8caabe76280791ab362a270cac3b5484415dc5ec?token=s%C2%9D%0B%F3%BF%BC%B5%C2%A3%F0%B6%80%BF%C2%81%F1%82%92%A7%05%18m%F1%B2%98%B8%C2%9A%2F%C3%8E%C2%86%C2%BB7%C3%A6%F1%9E%9A%B5~%C3%87&access_token=%C3%83%F0%BF%BC%BA&sudo=%F1%91%AF%86j%C3%81%F1%8B%9C%97%3E'
GET/repos/{owner}/{repo}/hooks/git/{id}Missing test dataUndocumented status code281

Undocumented status codeST103

Received: 403
Documented: 200, 404
Response403 Forbidden
{"message":"must be allowed to edit Git hooks","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/hooks/git/8caabe76280791ab362a270cac3b5484415dc5ec

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"token is required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: 1' -H 'Sudo;' -H 'X-GITEA-OTP;' http://0.0.0.0:41459/api/v1/repos/admin/demo/hooks/git/8caabe76280791ab362a270cac3b5484415dc5ec
PATCH/repos/{owner}/{repo}/hooks/git/{id}Authentication failed +1Undocumented status code281

Undocumented status codeST103

Received: 403
Documented: 200, 404
Response403 Forbidden
{"message":"must be allowed to edit Git hooks","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/repos/admin/demo/hooks/git/8caabe76280791ab362a270cac3b5484415dc5ec
PATCH/repos/{owner}/{repo}/hooks/{id}Missing test dataUndocumented Content-Type341

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d $'\x00' http://0.0.0.0:41459/api/v1/repos/0/0/hooks/-9223372036854775809
GET/repos/{owner}/{repo}/issues/comments/{id}/assetsMissing test dataUndocumented Content-Type284

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/issues/comments/null/assets
GET/repos/{owner}/{repo}/issues/comments/{id}/reactionsMissing test dataUndocumented status code282

Undocumented status codeST103

Received: 401
Documented: 200, 403, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'X-GITEA-OTP;' -H 'Authorization: Y' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/comments/1/reactions?token=mpYCAsc2DCDBmuQnwIIBOysl5OYQzqYdN2sB9YVo'
GET/repos/{owner}/{repo}/issues/{index}/assets/{attachment_id}Missing test dataUndocumented Content-Type308

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/demo/issues/1/assets/1
DELETE/repos/{owner}/{repo}/issues/{index}/assigneesMissing test dataUndocumented Content-Type310

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d $'\x00' http://0.0.0.0:41459/api/v1/repos/0/0/issues/false/assignees
GET/repos/{owner}/{repo}/issues/{index}/assignees/{assignee}Missing test dataUndocumented status code306

Undocumented status codeST103

Received: 403
Documented: 204, 400, 404
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H $'Authorization: 6l\t+V)H' -H 'Sudo: ;L'"'"'' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/12894/assignees/%C3%B5%C3%BA%F1%83%98%BA%C2%84?access_token='
DELETE/repos/{owner}/{repo}/issues/{index}/blocksMissing test dataUndocumented status code316

Undocumented status codeST103

Received: 422
Documented: 200, 404
Response422 Unprocessable Content
{"message":"[]: jsontext: invalid character '\\x00' at start of value","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d $'\x00' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/0/blocks
DELETE/repos/{owner}/{repo}/issues/{index}/dependenciesMissing test dataUndocumented status code315

Undocumented status codeST103

Received: 422
Documented: 200, 404, 423
Response422 Unprocessable Content
{"message":"[]: json: unable to unmarshal JSON number 9223372036854775808 into Go int64 within \"/index\": value out of range","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"$\u00d1\udafc\uddfe": {}, "\u00a3\u007f\u00a8\u00d4\u00e0\ud893\udd0d\u00b8": ["\u0085wN%\u00c1", false, true], ";": [72113001], "\u0082\u00f1\ud8e2\udfab": "\b\ud803\ude64\u008c\u00191\u00f3\u009d-", "\u009e\u0019\udb7a\udef6": null, "owner": "^", "repo": "", "index": 9223372036854775808}' http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/%C2%B4e%F1%B6%B0%B0%C3%B1/dependencies
DELETE/repos/{owner}/{repo}/issues/{index}/labelsMissing test dataUndocumented status code297

Undocumented status codeST103

Received: 401
Documented: 204, 403, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'X-GITEA-OTP: `#<' -H 'Authorization;' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/labels?token=%C3%8B%22%C2%A2%C2%B0&access_token=%F2%BE%80%B2%0C%C2%87&sudo=%C2%9E%F3%93%86%93%E1%8B%B6'
DELETE/repos/{owner}/{repo}/issues/{index}/labels/{id}Missing test dataUndocumented Content-Type308

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/%2C%24/issues/%F2%94%85%A1%F2%8F%8A%98%21%F3%94%9B%A9%F1%B3%B3%8E/labels/210225
DELETE/repos/{owner}/{repo}/issues/{index}/pinMissing test dataUndocumented Content-Type302

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/issues/0.13446756515093927/pin
GET/repos/{owner}/{repo}/issues/{index}/subscriptions/checkUndocumented status code310

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: cF8G>REP' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/issues/1/subscriptions/check?token=y4PpAVhvitJhDNjIbHHGFXAsuqTKHG8a0zShyEHK&sudo=%C2%96%C3%81&access_token=%C2%82%F3%B3%92%90%F3%9A%B8%AD'
DELETE/repos/{owner}/{repo}/issues/{index}/timesMissing test dataUndocumented Content-Type299

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/issues/-9223372036854775809/times
GET/repos/{owner}/{repo}/keys/{id}Undocumented Content-Type282

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/keys/null
PATCH/repos/{owner}/{repo}/labels/{id}Undocumented Content-Type329

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/repos/0/demo/labels/64
GET/repos/{owner}/{repo}/milestones/{id}Missing test dataUndocumented status code294

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: o?^XS aqc' -H 'Sudo: d,' 'http://0.0.0.0:41459/api/v1/repos/admin/%C3%B4/milestones/1%C3%9B%F0%A1%87%91%25%C3%94%F2%A5%9A%A3?sudo=%C3%90%F0%B9%95%A5%C3%A8%F1%B3%A5%93%C2%A4&access_token=&token=%28%F3%87%83%80%C3%B0%3FR%C3%94%F4%8C%AA%BE'

Undocumented status codeST103

Received: 403
Documented: 200, 404
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'Authorization: o?^XS aqc' -H 'Sudo: d,' 'http://0.0.0.0:41459/api/v1/repos/admin/%C3%B4/milestones/1%C3%9B%F0%A1%87%91%25%C3%94%F2%A5%9A%A3?access_token=&sudo=%C3%90%F0%B9%95%A5%C3%A8%F1%B3%A5%93%C2%A4&token='
PATCH/repos/{owner}/{repo}/projects/{id}Missing test dataUndocumented Content-Type326

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/projects/0.5805543365241754
PATCH/repos/{owner}/{repo}/projects/{id}/columns/{column_id}Missing test dataUndocumented Content-Type316

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/demo/projects/1/columns/174489031773
PATCH/repos/{owner}/{repo}/pulls/{index}Missing test dataUndocumented Content-Type403

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d $'\x00' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/null
GET/repos/{owner}/{repo}/pulls/{index}.{diffType}Undocumented Content-Type323

Undocumented Content-TypeST105

Received: application/json;charset=utf-8
Documented: text/plain
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/0/0/pulls/-9223372036854775808.diff?binary=true'
DELETE/repos/{owner}/{repo}/pulls/{index}/requested_reviewersMissing test dataUndocumented Content-Type323

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d $'\x00' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/1.1125369292536007e-308/requested_reviewers
GET/repos/{owner}/{repo}/pulls/{index}/reviewsMissing test dataUndocumented status code332

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: ){J;' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/pulls/362880/reviews?limit=18809&page=-586237&access_token=%27&token='
DELETE/repos/{owner}/{repo}/pulls/{index}/reviews/{id}Missing test dataUndocumented Content-Type302

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/-9223372036854775809/reviews/0
GET/repos/{owner}/{repo}/pulls/{index}/reviews/{id}Missing test dataUndocumented Content-Type300

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/S/pulls/0/reviews/-9223372036854775809
GET/repos/{owner}/{repo}/pulls/{index}/reviews/{id}/commentsMissing test dataUndocumented Content-Type306

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/%F3%B2%B7%95%C2%8A/pulls/false/reviews/2020618/comments
GET/repos/{owner}/{repo}/push_mirrorsSchema-violating request accepted325

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `limit` in query - violates `type` at /properties/limit (was integer, became number)
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/push_mirrors?limit=-5.39633357157798e-37'
DELETE/repos/{owner}/{repo}/push_mirrors/{name}Missing test dataUndocumented status code279

Undocumented status codeST103

Received: 401
Documented: 204, 400, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization;' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/push_mirrors/0?token=7%F1%B6%88%B3&sudo=%C2%BF%C2%BA%400%F2%9E%B6%8Em%C3%983&access_token=%C3%86%F2%9E%9E%93%C2%8Fh%1B%0A'
GET/repos/{owner}/{repo}/releases/latestMissing test dataUndocumented status code304

Undocumented status codeST103

Received: 403
Documented: 200, 404
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'Authorization: H4~Pz|%' -H 'Sudo: Me9' -H 'X-GITEA-OTP: =' http://0.0.0.0:41459/api/v1/repos/admin/demo/releases/latest

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization;' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/releases/latest?sudo=%F1%BD%96%91%C2%89%09K65%F1%9A%A3%B3g%0D%C2%81%C3%89%C2%BF%C2%A8%F2%96%8E%8F%F0%91%9E%B6%21&access_token=&token=gdt_FgbJia27VFWIHiqc8JYzGxw37Xj9bXf5EkZXSqWQwyv'
DELETE/repos/{owner}/{repo}/releases/tags/{tag}Missing test dataUndocumented status code293

Undocumented status codeST103

Received: 401
Documented: 204, 404, 422
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization: /<I~Xa5' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/releases/tags/%C2%B8%C3%84?token=a&sudo='
PATCH/repos/{owner}/{repo}/releases/{id}Schema-violating request accepted334

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: in body - invalid syntax: random bytes
Response200 OK
{"id":1,"tag_name":"<¸°","target_commitish":"main","name":"","body":"","url":"http://localhost:3000/api/v1/repos/admin/CC-BY-4.0/releases/1","html_url":"http://localhost:3000/admin/CC-BY-4.0/releases/tag/%3C%C2%B8%C2%B0","tarball_url":"http://localhost:3000/admin/CC-BY-4.0/archive/%3C%C2%B8%C2%B0.tar.gz","zipball_url":"http://localhost:3000/admin/CC-BY-4.0/archive/%3C%C2%B8%C2%B0.zip","upload_url":"http://localhost:3000/api/v1/repos/admin/CC-BY-4.0/releases/1/assets","draft":false,"prerelease":false,"create // Output truncated...
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d $'\x00' http://0.0.0.0:41459/api/v1/repos/admin/demo/releases/1
DELETE/repos/{owner}/{repo}/releases/{id}/assets/{attachment_id}Missing test dataUndocumented Content-Type301

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/0/%F4%8E%8E%98%F1%96%AB%9B%7F%F2%A5%AB%82%F2%86%BF%86%C3%A8U%C2%96%C2%97%C3%B0%C3%9A~%40O%C3%84%7CO/releases/-9223372036854775809/assets/261'
GET/repos/{owner}/{repo}/reviewersUndocumented status code314

Undocumented status codeST103

Received: 403
Documented: 200, 404
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'Authorization: FALSE' -H $'Sudo: Ve(_\'+@P5V\tG<' http://0.0.0.0:41459/api/v1/repos/admin/demo/reviewers

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization;' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/reviewers?access_token=%C2%93%F3%80%9E%92~i%C3%B3%0A&sudo=%C3%99%F4%80%B1%90%5E%F1%A5%8A%81%F0%B7%AD%98%C2%AD&token=%F3%96%8A%8E5L%C3%9C%F0%B4%9A%A1%C3%A3%C2%A2X%C2%B4%C2%8B%C2%9D%C2%BE%C3%B99%C2%B8%F0%B6%81%87C%F3%9B%AD%BEY%F1%98%94%AE'
DELETE/repos/{owner}/{repo}/subscriptionMissing Content-Type header306

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/subscription
PUT/repos/{owner}/{repo}/subscriptionUndocumented status code316

Undocumented status codeST103

Received: 401
Documented: 200, 403, 404
Response401 Unauthorized
{"message":"token is required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PUT -H 'Authorization;' -H 'Sudo;' -H 'X-GITEA-OTP;' http://0.0.0.0:41459/api/v1/repos/admin/demo/subscription
GET/repos/{owner}/{repo}/tag_protectionsUndocumented status code310

Undocumented status codeST103

Received: 404
Documented: 200
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/tag_protections

Undocumented status codeST103

Received: 401
Documented: 200
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization;' 'http://0.0.0.0:41459/api/v1/repos/admin/demo/tag_protections?access_token=%C2%B4%F2%9D%AB%9B%C3%AD'
GET/repos/{owner}/{repo}/tag_protections/{id}Undocumented status code298

Undocumented status codeST103

Received: 403
Documented: 200, 404
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'Authorization: Q34B*V4' 'http://0.0.0.0:41459/api/v1/repos/%F1%BE%B3%8B%2C%C3%BD%07%1A%C3%9A/demo/tag_protections/1?sudo=%C3%B3~%F2%89%87%A4'
PATCH/repos/{owner}/{repo}/tag_protections/{id}Undocumented Content-Type328

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{}' http://0.0.0.0:41459/api/v1/repos/0/%C2%9E%F0%A5%A3%A6/tag_protections/1
DELETE/repos/{owner}/{repo}/topics/{topic}Missing Content-Type header194

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/admin/demo/topics/k
GET/repos/{owner}/{repo}/wiki/revisions/{pageName}Missing test dataUndocumented status code311

Undocumented status codeST103

Received: 401
Documented: 200, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: 6qY' -H 'X-GITEA-OTP: OE' 'http://0.0.0.0:41459/api/v1/repos/admin/%F0%9E%A5%93U%C3%90%C2%82/wiki/revisions/P%C2%9D%F2%BD%92%89r%F0%A4%96%AA%C2%AF%1Bp%0D%C2%98%C2%AD%17%F2%B6%8B%82?token=%C2%83%F2%84%A0%8E%C2%89%C3%95%1E%3C%F2%98%90%8FU%C2%98'
GET/teams/{id}/membersSchema-violating request accepted342

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
[{"id":1,"login":"admin","type":"User","login_name":"","source_id":0,"full_name":"","email":"admin@example.com","avatar_url":"http://0.0.0.0:41459/avatars/d0557e4b4e83732824a59f34458ed3b93e59497f2fa6617ba649a0cfe3dc3f12","html_url":"http://0.0.0.0:41459/admin","language":"","is_admin":true,"last_login":"1970-01-01T00:00:00Z","created":"2026-10-19T11:55:08Z","restricted":false,"active":true,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/teams/1/members?page=null&page=null'
PUT/teams/{id}/members/{username}Missing Content-Type header296

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
  1. GET/user/teams
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/teams?page=-5117000506584769882056818688'
  2. PUT/teams/2/members/adminfailed here
    curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/teams/2/members/admin
DELETE/teams/{id}/repos/{org}/{repo}Missing Content-Type header304

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
  1. GET/user/teams
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/teams?limit=-1253947&page=-653238151'
  2. DELETE/teams/2/repos/workbench/demofailed here
    curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/teams/2/repos/workbench/demo
PUT/teams/{id}/repos/{org}/{repo}Missing Content-Type header303

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
  1. GET/user/teams
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/teams
  2. PUT/teams/2/repos/workbench/demofailed here
    curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/teams/2/repos/workbench/demo
DELETE/tokenUndocumented status code303

Undocumented status codeST103

Received: 404
Documented: 204
Response404 Not Found
{"message":"invalid access token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/token

Undocumented status codeST103

Received: 401
Documented: 204
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'X-GITEA-OTP: V' -H 'Authorization: '"'"'' -H 'Sudo: (r' 'http://0.0.0.0:41459/api/v1/token?token=%F1%A3%93%9AH%F1%9F%82%A6%3F%25%7C'
GET/tokenUndocumented status code302

Undocumented status codeST103

Received: 404
Documented: 200
Response404 Not Found
{"message":"invalid access token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/token
GET/user/actions/runnersSchema-violating request accepted550

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `disabled` in query - disabled: Incorrect type
Response200 OK
{"runners":[],"total_count":0}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/actions/runners?disabled=null&disabled=null'
DELETE/user/actions/secrets/{secretname}Missing test dataUndocumented status code291

Undocumented status codeST103

Received: 401
Documented: 204, 400, 404
Response401 Unauthorized
{"message":"token is required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization: 6OG/I ?\a3vcF' http://0.0.0.0:41459/api/v1/user/actions/secrets/0
GET/user/actions/variablesSchema-violating request accepted330

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/actions/variables?page=null&page=null'
DELETE/user/actions/variables/{variablename}Missing test dataUndocumented status code294

Undocumented status codeST103

Received: 401
Documented: 201, 204, 400, 404
Response401 Unauthorized
{"message":"token is required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization: 5' http://0.0.0.0:41459/api/v1/user/actions/variables/%0E%C2%AC%F0%96%B5%81K2
GET/user/actions/variables/{variablename}Missing test dataUndocumented status code285

Undocumented status codeST103

Received: 401
Documented: 200, 400, 404
Response401 Unauthorized
{"message":"invalid username, password or token","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Sudo: WN+BOL' -H 'X-GITEA-OTP: 7)s' -H 'Authorization;' 'http://0.0.0.0:41459/api/v1/user/actions/variables/tU?access_token=%F0%A9%89%8EXz%F2%A4%AF%9F%C2%88.%C2%A0%C3%99%17%C3%8C&sudo=Security'

Undocumented status codeST103

Received: 403
Documented: 200, 400, 404
Response403 Forbidden
{"message":"Only administrators allowed to sudo."}
Reproduce
curl -X GET -H 'Authorization;' -H 'X-GITEA-OTP: 7)s' -H 'Sudo: WN+BOL' 'http://0.0.0.0:41459/api/v1/user/actions/variables/h?access_token=&sudo='
GET/user/applications/oauth2Schema-violating request accepted505

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/applications/oauth2?page=null&page=null'
GET/user/followersSchema-violating request accepted537

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/followers?page=null&page=null'
DELETE/user/following/{username}Missing Content-Type header48

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/following/admin
PUT/user/following/{username}Missing Content-Type header290

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/following/admin
GET/user/gpg_keysSchema-violating request accepted539

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/gpg_keys?page=null&page=null'
GET/user/hooksSchema-violating request accepted528

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/hooks?page=null&page=null'
DELETE/user/hooks/{id}Undocumented status code308

Undocumented status codeST103

Received: 404
Documented: 204
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/hooks/-9223372036854775808
GET/user/hooks/{id}Undocumented status code300

Undocumented status codeST103

Received: 404
Documented: 200
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/hooks/-9223372036854775808
PATCH/user/hooks/{id}Undocumented status code356

Undocumented status codeST103

Received: 404
Documented: 200
Response404 Not Found
{"message":"not found","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"active": false, "authorization_header": "", "branch_filter": "", "config": {}, "events": [], "name": ""}' http://0.0.0.0:41459/api/v1/user/hooks/-9223372036854775808

Undocumented status codeST103

Received: 422
Documented: 200
Response422 Unprocessable Content
{"message":"[]: json: unable to unmarshal JSON object into Go string within \"/name\"","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"active": false, "authorization_header": "", "branch_filter": "", "config": {}, "events": [], "name": {}}' http://0.0.0.0:41459/api/v1/user/hooks/-9223372036854775808
GET/user/keysSchema-violating request accepted557

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/keys?page=null&page=null'
GET/user/projectsSchema-violating request accepted533

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `state` in query - state: Incorrect type
Response200 OK
[]
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/projects?state=null&state=null'
DELETE/user/projects/{id}Missing Content-Type header331

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
  1. GET/user/projects
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/projects
  2. DELETE/user/projects/219failed here
    curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/projects/219
PATCH/user/projects/{id}Schema-valid request rejected250

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[Title]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"card_type": "", "description": "", "state": "open", "title": ""}' http://0.0.0.0:41459/api/v1/user/projects/-9223372036854775808
PATCH/user/projects/{id}/columns/{column_id}Schema-valid request rejected276

Schema-valid request rejectedST202

Valid data should have been accepted
Expected: 2xx, 3xx, 401, 403, 404, 409, 429, 5xx
Response422 Unprocessable Content
{"message":"[Title]: Required","url":"http://localhost:3000/api/swagger"}
Reproduce
curl -X PATCH -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"color": "", "sorting": 0, "title": ""}' http://0.0.0.0:41459/api/v1/user/projects/-9223372036854775808/columns/-9223372036854775808
DELETE/user/starred/{owner}/{repo}Missing Content-Type header303

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/starred/admin/demo
GET/user/starred/{owner}/{repo}Missing Content-Type header307

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/starred/admin/demo
PUT/user/starred/{owner}/{repo}Missing Content-Type header290

Missing Content-Type headerST104

The following media types are documented in the schema:
- `application/json`
Response204 No Content
<EMPTY>
Reproduce
curl -X PUT -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/starred/admin/demo
GET/user/teamsSchema-violating request accepted535

Schema-violating request acceptedST201

Invalid data should have been rejected
Expected: 400, 401, 403, 404, 405, 406, 409, 415, 422, 428, 429, 5xx
Invalid component: parameter `page` in query - page: Incorrect type
Response200 OK
[{"id":1,"name":"Owners","description":"","organization":{"id":3,"name":"workbench","full_name":"","email":"","avatar_url":"http://0.0.0.0:41459/avatars/1f303fd10424e23d36ee4dbd6af13c4d735f75bfe318b1259474fa53863403ba","description":"","website":"","location":"","visibility":"public","repo_admin_change_team_access":false,"username":"workbench"},"includes_all_repositories":true,"permission":"owner","units":["repo.issues","repo.wiki","repo.projects","repo.code","repo.pulls","repo.releases","repo.ext_wiki","re // Output truncated...
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/user/teams?page=null&page=null'
GET/users/{username}/orgs/{org}/permissionsUndocumented Content-Type330

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/users/admin/orgs/workbench/permissions
DELETE/users/{username}/tokens/{token}Missing test dataUndocumented Content-Type354

Undocumented Content-TypeST105

Received: text/plain; charset=utf-8
Documented: application/json
Response404 Not Found
user does not exist
Reproduce
  1. GET/user/emails
    curl -X GET -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/emails
  2. DELETE/users/0/tokens/gdt_cOVnCMcLyABeu6KFtume2El5OaWoBbO1ti8ujRaMrz5failed here
    curl -X DELETE -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/users/0/tokens/gdt_cOVnCMcLyABeu6KFtume2El5OaWoBbO1ti8ujRaMrz5
DELETE/admin/actions/runners/{runner_id}Missing test data292
GET/admin/actions/runners/{runner_id}Missing test data298
PATCH/admin/actions/runners/{runner_id}Missing test data293
GET/notifications/threads/{id}Missing test data298
GET/packages/{owner}/{type}/{name}Missing test data295
GET/packages/{owner}/{type}/{name}/-/latestMissing test data293
DELETE/packages/{owner}/{type}/{name}/{version}Missing test data277
GET/packages/{owner}/{type}/{name}/{version}Missing test data287
GET/packages/{owner}/{type}/{name}/{version}/filesMissing test data288
DELETE/repos/{owner}/{repo}/actions/artifacts/{artifact_id}Missing test data278
GET/repos/{owner}/{repo}/actions/artifacts/{artifact_id}/zipMissing test data289
GET/repos/{owner}/{repo}/actions/jobs/{job_id}Missing test data292
GET/repos/{owner}/{repo}/actions/runners/{runner_id}Missing test data296
PATCH/repos/{owner}/{repo}/actions/runners/{runner_id}Missing test data297
DELETE/repos/{owner}/{repo}/actions/runs/{run}Missing test data32
GET/repos/{owner}/{repo}/actions/runs/{run}Missing test data295
GET/repos/{owner}/{repo}/actions/runs/{run}/attempts/{attempt}Missing test data297
GET/repos/{owner}/{repo}/actions/runs/{run}/attempts/{attempt}/jobsMissing test data328
GET/repos/{owner}/{repo}/actions/variables335
DELETE/repos/{owner}/{repo}/actions/variables/{variablename}Missing test data249
GET/repos/{owner}/{repo}/actions/workflows/{workflow_id}Missing test data289
PUT/repos/{owner}/{repo}/actions/workflows/{workflow_id}/disableMissing test data290
GET/repos/{owner}/{repo}/assignees306
GET/repos/{owner}/{repo}/assignees/{assignee}Missing test data294
DELETE/repos/{owner}/{repo}/branch_protections/{name}Missing test data184
GET/repos/{owner}/{repo}/collaborators/{collaborator}/permissionMissing test data289
GET/repos/{owner}/{repo}/commits/{ref}/statusesMissing test data334
GET/repos/{owner}/{repo}/commits/{sha}/pullMissing test data283
GET/repos/{owner}/{repo}/git/refs/{ref}Missing test data210
DELETE/repos/{owner}/{repo}/hooks/{id}Missing test data290
GET/repos/{owner}/{repo}/hooks/{id}Missing test data297
DELETE/repos/{owner}/{repo}/issues/comments/{id}Missing test data118
GET/repos/{owner}/{repo}/issues/comments/{id}Missing test data291
DELETE/repos/{owner}/{repo}/issues/comments/{id}/assets/{attachment_id}Missing test data294
GET/repos/{owner}/{repo}/issues/comments/{id}/assets/{attachment_id}Missing test data297
PATCH/repos/{owner}/{repo}/issues/comments/{id}/assets/{attachment_id}Missing test data296
DELETE/repos/{owner}/{repo}/issues/comments/{id}/reactionsMissing test data276
PATCH/repos/{owner}/{repo}/issues/{index}Missing test data397
DELETE/repos/{owner}/{repo}/issues/{index}/assets/{attachment_id}Missing test data304
PATCH/repos/{owner}/{repo}/issues/{index}/assets/{attachment_id}Missing test data315
GET/repos/{owner}/{repo}/issues/{index}/blocksMissing test data309
DELETE/repos/{owner}/{repo}/issues/{index}/comments/{id}Missing test data289
GET/repos/{owner}/{repo}/issues/{index}/dependenciesMissing test data308
DELETE/repos/{owner}/{repo}/issues/{index}/lockMissing test data307
DELETE/repos/{owner}/{repo}/issues/{index}/reactionsMissing test data304
DELETE/repos/{owner}/{repo}/issues/{index}/stopwatch/deleteMissing test data306
DELETE/repos/{owner}/{repo}/issues/{index}/subscriptions/{user}Missing test data301
PUT/repos/{owner}/{repo}/issues/{index}/subscriptions/{user}Missing test data286
DELETE/repos/{owner}/{repo}/issues/{index}/times/{id}Missing test data202
GET/repos/{owner}/{repo}/keys329
DELETE/repos/{owner}/{repo}/keys/{id}Missing test data206
DELETE/repos/{owner}/{repo}/labels/{id}Missing test data99
DELETE/repos/{owner}/{repo}/milestones/{id}Missing test data283
PATCH/repos/{owner}/{repo}/milestones/{id}Missing test data309
DELETE/repos/{owner}/{repo}/projects/{id}Missing test data219
GET/repos/{owner}/{repo}/projects/{id}/columnsMissing test data312
DELETE/repos/{owner}/{repo}/projects/{id}/columns/{column_id}Missing test data289
GET/repos/{owner}/{repo}/projects/{id}/columns/{column_id}Missing test data297
GET/repos/{owner}/{repo}/projects/{id}/columns/{column_id}/issuesMissing test data323
DELETE/repos/{owner}/{repo}/projects/{id}/columns/{column_id}/issues/{issue_id}Missing test data244
GET/repos/{owner}/{repo}/pulls/{base}/{head}Missing test data295
GET/repos/{owner}/{repo}/pulls/{index}Missing test data298
GET/repos/{owner}/{repo}/pulls/{index}/commitsMissing test data362
GET/repos/{owner}/{repo}/pulls/{index}/filesMissing test data351
DELETE/repos/{owner}/{repo}/pulls/{index}/mergeMissing test data301
GET/repos/{owner}/{repo}/pulls/{index}/mergeMissing test data305
GET/repos/{owner}/{repo}/push_mirrors/{name}Missing test data284
GET/repos/{owner}/{repo}/releases/tags/{tag}Missing test data289
DELETE/repos/{owner}/{repo}/releases/{id}Missing test data197
PATCH/repos/{owner}/{repo}/releases/{id}/assets/{attachment_id}309
GET/repos/{owner}/{repo}/subscription297
DELETE/repos/{owner}/{repo}/tag_protections/{id}Missing test data187
DELETE/repos/{owner}/{repo}/tags/{tag}Missing test data287
GET/repos/{owner}/{repo}/tags/{tag}Missing test data290
DELETE/repos/{owner}/{repo}/teams/{team}Missing test data285
PUT/repos/{owner}/{repo}/teams/{team}Authentication failed +1287
GET/repos/{owner}/{repo}/times/{user}Missing test data289
DELETE/repos/{owner}/{repo}/wiki/page/{pageName}Missing test data191
GET/repos/{owner}/{repo}/wiki/page/{pageName}Missing test data286
DELETE/teams/{id}/members/{username}Missing test data304
GET/teams/{id}/members/{username}305
GET/teams/{id}/repos/{org}/{repo}Missing test data293
GET/user584
DELETE/user/actions/runners/{runner_id}Missing test data306
GET/user/actions/runners/{runner_id}Missing test data307
PATCH/user/actions/runners/{runner_id}Missing test data301
GET/user/applications/oauth2/{id}304
GET/user/emails530
GET/user/gpg_key_token308
GET/user/gpg_keys/{id}Missing test data304
DELETE/user/keys/{id}Missing test data308
GET/user/keys/{id}Missing test data310
GET/user/projects/{id}296
GET/user/projects/{id}/columns335
DELETE/user/projects/{id}/columns/{column_id}Missing test data312
GET/user/projects/{id}/columns/{column_id}316
GET/user/projects/{id}/columns/{column_id}/issues341
DELETE/user/projects/{id}/columns/{column_id}/issues/{issue_id}Missing test data304
GET/user/settings310
Not tied to an operation
  • Allow header mismatchx25
OPTIONS/admin/actions/runners/registration-token

Allow header mismatchST205

`Allow: POST, GET, DELETE, PATCH` does not match the schema. Undocumented methods advertised: DELETE, GET, PATCH

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/admin/actions/runners/registration-token
OPTIONS/orgs/{org}/actions/runners/registration-token

Allow header mismatchST205

`Allow: POST, PATCH, GET, DELETE` does not match the schema. Undocumented methods advertised: DELETE, GET, PATCH

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/orgs/0/actions/runners/registration-token
OPTIONS/repos/{owner}/{repo}/actions/runners/registration-token

Allow header mismatchST205

`Allow: POST, GET, DELETE, PATCH` does not match the schema. Undocumented methods advertised: DELETE, GET, PATCH

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/actions/runners/registration-token
OPTIONS/repos/{owner}/{repo}/branch_protections/priority

Allow header mismatchST205

`Allow: POST, GET, PATCH, DELETE` does not match the schema. Undocumented methods advertised: DELETE, GET, PATCH

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"ids": []}' http://0.0.0.0:41459/api/v1/repos/0/0/branch_protections/priority
OPTIONS/repos/{owner}/{repo}/keys/tokens

Allow header mismatchST205

`Allow: POST, GET, DELETE` does not match the schema. Undocumented methods advertised: DELETE, GET

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"read_only": false, "title": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/keys/tokens
OPTIONS/repos/{owner}/{repo}/pulls/{index}/requested_reviewers

Allow header mismatchST205

`Allow: DELETE, POST, GET` does not match the schema. Undocumented methods advertised: GET

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"reviewers": [], "team_reviewers": []}' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/-9223372036854775808/requested_reviewers
OPTIONS/repos/{owner}/{repo}/pulls/{index}/update

Allow header mismatchST205

`Allow: POST, GET` does not match the schema. Undocumented methods advertised: GET

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/0/0/pulls/-9223372036854775808/update?style=merge'
OPTIONS/user/actions/runners/registration-token

Allow header mismatchST205

`Allow: POST, GET, DELETE, PATCH` does not match the schema. Undocumented methods advertised: DELETE, GET, PATCH

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/user/actions/runners/registration-token
OPTIONS/repos/issues/search

Allow header mismatchST205

`Allow: GET, DELETE, PATCH` does not match the schema. Undocumented methods advertised: DELETE, PATCH

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/issues/search?state=open&labels=&milestones=&q=&type=issues&since=2000-01-01T00%3A00%3A00Z&before=2000-01-01T00%3A00%3A00Z&assigned=true&created=true&mentioned=true&review_requested=true&reviewed=true&owner=&created_by=&team=&page=1&limit=0'
OPTIONS/repos/{owner}/{repo}/hooks/git

Allow header mismatchST205

`Allow: GET, PATCH, DELETE` does not match the schema. Undocumented methods advertised: DELETE, PATCH

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/hooks/git
OPTIONS/repos/{owner}/{repo}/issues/comments

Allow header mismatchST205

`Allow: GET, PATCH, DELETE` does not match the schema. Undocumented methods advertised: DELETE, PATCH

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/0/0/issues/comments?since=2000-01-01T00%3A00%3A00Z&before=2000-01-01T00%3A00%3A00Z&page=0&limit=0'
OPTIONS/repos/{owner}/{repo}/issues/pinned

Allow header mismatchST205

`Allow: GET, PATCH, DELETE` does not match the schema. Undocumented methods advertised: DELETE, PATCH

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/issues/pinned
OPTIONS/repos/{owner}/{repo}/issues/{index}/subscriptions/check

Allow header mismatchST205

`Allow: GET, PUT, DELETE` does not match the schema. Undocumented methods advertised: DELETE, PUT

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/issues/-9223372036854775808/subscriptions/check
OPTIONS/repos/{owner}/{repo}/pulls/pinned

Allow header mismatchST205

`Allow: GET, PATCH` does not match the schema. Undocumented methods advertised: PATCH

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/pinned
OPTIONS/repos/{owner}/{repo}/pulls/{index}.{diffType}

Allow header mismatchST205

`Allow: GET, PATCH` does not match the schema. Undocumented methods advertised: PATCH

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' 'http://0.0.0.0:41459/api/v1/repos/0/0/pulls/-9223372036854775808.diff?binary=true'
OPTIONS/repos/{owner}/{repo}/releases/latest

Allow header mismatchST205

`Allow: GET, PATCH, DELETE` does not match the schema. Undocumented methods advertised: DELETE, PATCH

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/releases/latest
OPTIONS/admin/users/{username}/orgs

Allow header mismatchST205

`Allow: GET, POST` does not match the schema. Undocumented methods advertised: GET

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"description": "", "email": "", "full_name": "", "location": "", "repo_admin_change_team_access": false, "username": "", "visibility": "public", "website": ""}' http://0.0.0.0:41459/api/v1/admin/users/0/orgs
OPTIONS/orgs/{org}/projects/{id}/columns/move

Allow header mismatchST205

`Allow: POST, GET, PATCH, DELETE` does not match the schema. Undocumented methods advertised: DELETE, GET, PATCH

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"column_ids": []}' http://0.0.0.0:41459/api/v1/orgs/0/projects/-9223372036854775808/columns/move
OPTIONS/repos/{owner}/{repo}/projects/{id}/columns/move

Allow header mismatchST205

`Allow: POST, GET, PATCH, DELETE` does not match the schema. Undocumented methods advertised: DELETE, GET, PATCH

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"column_ids": []}' http://0.0.0.0:41459/api/v1/repos/0/0/projects/-9223372036854775808/columns/move
OPTIONS/repos/{owner}/{repo}/pulls/comments/{id}/resolve

Allow header mismatchST205

`Allow: POST, GET` does not match the schema. Undocumented methods advertised: GET

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/comments/-9223372036854775808/resolve
OPTIONS/repos/{owner}/{repo}/pulls/comments/{id}/unresolve

Allow header mismatchST205

`Allow: POST, GET` does not match the schema. Undocumented methods advertised: GET

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/comments/-9223372036854775808/unresolve
OPTIONS/repos/{owner}/{repo}/pulls/{index}/comments/{id}/replies

Allow header mismatchST205

`Allow: POST, GET` does not match the schema. Undocumented methods advertised: GET

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"body": ""}' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/-9223372036854775808/comments/-9223372036854775808/replies
OPTIONS/repos/{owner}/{repo}/pulls/{index}/reviews/{id}/dismissals

Allow header mismatchST205

`Allow: POST, GET` does not match the schema. Undocumented methods advertised: GET

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"message": "", "priors": false}' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/-9223372036854775808/reviews/-9223372036854775808/dismissals
OPTIONS/repos/{owner}/{repo}/pulls/{index}/reviews/{id}/undismissals

Allow header mismatchST205

`Allow: POST, GET` does not match the schema. Undocumented methods advertised: GET

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' http://0.0.0.0:41459/api/v1/repos/0/0/pulls/-9223372036854775808/reviews/-9223372036854775808/undismissals
OPTIONS/user/projects/{id}/columns/move

Allow header mismatchST205

`Allow: POST, GET, PATCH, DELETE` does not match the schema. Undocumented methods advertised: DELETE, GET, PATCH

List exactly the methods this resource supports in `Allow`
Response405 Method Not Allowed
<EMPTY>
Reproduce
curl -X OPTIONS -H 'Authorization: Basic YWRtaW46V29ya2JlbmNoMTIzIQ==' -H 'Content-Type: application/json' -d '{"column_ids": []}' http://0.0.0.0:41459/api/v1/user/projects/-9223372036854775808/columns/move