entire yaml marked with problem "should have `security` defined" about redocly-vs-code

[AntonKozachuk]

Hi @jabielecki,

Thanks for raising your concerns.

We already have a fix for this visual issue to avoid highlighting the whole definition.

It will be reporting only on the specific operations that lack security or the openapi field itself.

The fix will be added to the next release.

As for the warning, we will consider your suggestion but our team has a strong opinion that every API should have security defined.

Even if the API is truly public without any credentials required, define the empty security section to let people know you didn't forget.

Hope this makes sense.

[jabielecki]

Thank you very much for working on it!

For the error level, if it's a well-informed and well-intended departure from OAS3, well, you are the experts here 😄 👍