Skip to main content

Alpha This is a new service. Help us improve it and give your feedback.

MUST

MUST use https protocol only

Servers MUST be https and no other protocol is allowed.

Important:

For openapi definitions marked with info.x-api-type: pygeoapi, this rule’s severity is automatically set to warn by the override-severity-pygeoapi rule. See 1.

Invalid Example

servers:
  - url: http://azgw.api.ukhsa.gov.uk/detect/testing/v1
    ...

Valid Example

servers:
  - url: https://azgw.api.ukhsa.gov.uk/detect/testing/v1
    ...

UKHSA Guidelines Security

Published: 10 February 2025
Last updated: 25 September 2025
Page Source