SAP-samples/cloud-cap-hana-swapi

6 errors, 19 warningsmain

25 issues need attention.

6 errors and 19 warnings in the paths between 180 routes and 23 tables.

ROUTE FINDINGS19 of 180 · 7/7 rules
ROUTES
180
TABLES
23
FILES READ
107
RULES RUN
7/7

25 findings

  • GET StarWarsEpisode/Episodes can reach Episode without authenticating.

    auth-before-dataGET StarWarsEpisode/Episodes → Episode

  • GET StarWarsEpisode/Episode2People can reach Episode2People without authenticating.

    auth-before-dataGET StarWarsEpisode/Episode2People → Episode2People

  • GET StarWarsEpisode/Episode2Planets can reach Episode2Planets without authenticating.

    auth-before-dataGET StarWarsEpisode/Episode2Planets → Episode2Planets

  • GET StarWarsEpisode/Episode2Starships can reach Episode2Starships without authenticating.

    auth-before-dataGET StarWarsEpisode/Episode2Starships → Episode2Starships

  • GET StarWarsEpisode/Episode2Vehicles can reach Episode2Vehicles without authenticating.

    auth-before-dataGET StarWarsEpisode/Episode2Vehicles → Episode2Vehicles

  • GET StarWarsEpisode/Episode2Species can reach Episode2Species without authenticating.

    auth-before-dataGET StarWarsEpisode/Episode2Species → Episode2Species

  • GET -data/Entities has no validator or rate limiter attached.

    public-entry-guarded

  • POST -data/Entities has no validator or rate limiter attached.

    public-entry-guarded

  • PATCH -data/Entities has no validator or rate limiter attached.

    public-entry-guarded

  • DELETE -data/Entities has no validator or rate limiter attached.

    public-entry-guarded

  • GET -data/Data has no validator or rate limiter attached.

    public-entry-guarded

  • POST -data/Data has no validator or rate limiter attached.

    public-entry-guarded

  • PATCH -data/Data has no validator or rate limiter attached.

    public-entry-guarded

  • DELETE -data/Data has no validator or rate limiter attached.

    public-entry-guarded

  • GET StarWarsEpisode/Episodes has no validator or rate limiter attached.

    public-entry-guarded

  • GET StarWarsEpisode/Episode2People has no validator or rate limiter attached.

    public-entry-guarded

  • GET StarWarsEpisode/Episode2Planets has no validator or rate limiter attached.

    public-entry-guarded

  • GET StarWarsEpisode/Episode2Starships has no validator or rate limiter attached.

    public-entry-guarded

  • GET StarWarsEpisode/Episode2Vehicles has no validator or rate limiter attached.

    public-entry-guarded

  • GET StarWarsEpisode/Episode2Species has no validator or rate limiter attached.

    public-entry-guarded

  • GET StarWarsEpisode/CloneWarsChronologicalOrder has no validator or rate limiter attached.

    public-entry-guarded

  • GET /events/stream has no validator or rate limiter attached.

    public-entry-guarded

  • GET /galaxy has no validator or rate limiter attached.

    public-entry-guarded

  • GET /galaxy/ has no validator or rate limiter attached.

    public-entry-guarded

  • GET /galaxy/index.html has no validator or rate limiter attached.

    public-entry-guarded

Part of this repository was not read, so this report is incomplete. Unread: cap/srv/people-service.cds, cap/srv/people-service.cds, cap/srv/film-service.cds.

Sign up free and open this architecture →

Free account, no card. The repository opens as an editable graph.

Add this check to the README

wyro architecture badge
[![wyro architecture](https://wyro.in/api/badge/SAP-samples/cloud-cap-hana-swapi)](https://wyro.in/scan/SAP-samples/cloud-cap-hana-swapi)

It updates itself whenever the repository changes and links back to this report.

What this is

Wyro reads the repository’s routes and data models and checks the paths between them: whether a route can reach a table without passing a guard, whether a datastore holding personal data is exposed to a public read, whether an endpoint that issues credentials requires the credentials it issues.

It is rule-based, not a model. The same commit produces the same result every time, and it does not guess at business rules it cannot see. A rule with nothing to look at is reported as not having run — never as a pass.

Create a free accountCheck repos in your browser

This check runs on public source through GitHub’s own API and needs no account. A free account adds the editable architecture canvas, private repositories on paid plans, and a CI gate. No card required.