The audit task has two phases:

• Discovery: The task in your CI/CD pipeline checks your project for any OpenAPI definitions (.json, .yaml, and .yml) and GraphQL files (.graphql, .graphqls, .gql, .gqls, .sdl). For OpenAPI definitions, if the file is .yaml or .yml, it is automatically converted to JSON. The discovered APIs are automatically uploaded to an API collection in 42Crunch Platform.
• Audit: Security Audit audits the uploaded APIs for their well-formedness and security. If the quality of the APIs meets your criteria, the task or job ends with a success, if they do not, the task fails. Your CI/CD pipeline processes the result as you have defined and the continues to the next task or job.