·
Last changedVersion:
This version passed the hardening gate. Hardening updated the skill content, normalized allowed-tools to the canonical single-string form, and independently checked the resulting changes. Classified findings before hardening: 1. Classified findings closed: 0. Classified findings remaining: 1. Unclassified scanner findings remaining: 0. Review findings closed: 4. Review findings remaining: 6.
1
1
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
references/security.md | Sensitive Data & Secret Exposure | Hardcoded secret | Low | Open |
1 finding
This guide covers best practices for designing GraphQL schemas that are intuitive, performant, and maintainable. Schema design is primarily a server-side concern that directly impacts API usability.
| Pattern | Meaning |
|---|---|
String | Nullable - may be null |
String! | Non-null - always has value |
[String] | Nullable list, nullable items |
[String!] | Nullable list, non-null items |
[String]! | Non-null list, nullable items |
[String!]! | Non-null list, non-null items |
Best Practice: Use [Type!]! for lists - empty list over null, no null items.
Detailed documentation for specific topics:
mutation(input: InputType!)Node interface for refetchabilityQuery.users or Post.comments: return a connection and give first a default page sizeID type for identifiers, not String or IntGet started with chainctlchainctl skill install public/apollographql/graphql-schema:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/apollographql/skills/graphql-schema:latest
MIT
HARDENING.md
LICENSE
SKILL.md
references/errors.md
references/naming.md
references/pagination.md
references/security.md
references/types.md