Incorrect 'Response As JSON Object:' violation

Given the following swagger spec:

swagger: '2.0'

info:
  version: "0.0.1"
  title: API Example

schemes:
    - "https"
basePath: /
produces:
  - application/json
consumes:
  - application/json

securityDefinitions:
  oauth2:
    type: oauth2
    flow: password
    tokenUrl: https://tokeninfo.example.com
    scopes:
      uid: Unique identifier of the user accessing the service.

security:
  - oauth2: [uid]

paths:
  '/resources':
    get:
      summary: List all resources
      responses:
        200:
          description: List of all resources.
          schema:
            type: object
            properties:
              items:
                type: array
                items:
                    '$ref': '#/definitions/Resource'
        500:
          description: Unexpected error

definitions:
  Resource:
    type: object
    properties:
      name:
        type: string

I get this violation when running the CLI:

$ cli/bin/zally swagger.yaml
Found the following MUST violations
===================================
Response As JSON Object:
	Always Return JSON Objects As Top-Level Data Structures To Support Extensibility
	/resources/GET/200

Summary:
=======
COULD violations: 0
SHOULD violations: 0
MUST violations: 1

Since the response type of /resources/GET/200 is:

{
  "items": [Resource,]
}

I would not expect it to be a violation.

[mkulak]

I would like to pick that one. @fmueller are you in a process of fixing it or I can pick that?

[fmueller]

Thank you for providing us with this detailed bug description. I could reproduce the issue with your swagger example. There is also a bigger issue with this rule implementation. Fixing it will take some time. But I’m on it.