Invalid SSL certificates. What is Kiota trying to access?

[rudfoss-rr]

I'm evaluating whether to use Kiota for client generation from our OpenAPI files at the moment and I'm struggling with understanding exactly what is happening behind the scenes. I'm using the containerized CLI.

We are using a self-signed certificate in our environment and from the docs I can see that the generate command has a parameter for ignoring SSL validation. This seems to work, but I don't fully understand why it needs any network access at all. This is the full command I'm running which generates clients just fine as long as the --disable-ssl-validation parameter is set:

docker run \
	--rm \
	--user $(id -u):$(id -g) \
	-v ./kiota_generated:/app/output \
	-v ./openApi.json:/app/openapi.json \
	-e KIOTA_TUTORIAL_ENABLED=false \
	-e KIOTA_CLI_TELEMETRY_OPTOUT=true \
	mcr.microsoft.com/openapi/kiota@sha256:f15b000208a96f18fdc913744fb1a8c8c65926be34e9d33d56fc9e7318c4f2f8 \
	generate --openapi /app/openapi.json --language typescript --namespace-name test-api --disable-ssl-validation

Since the openapi spec file is mounted directly why is there any need for network access? And is there a way for me to cache whatever it needs so that it doesn't have to request anything?

I'm also getting the same SSL error when using the info command and it doesn't seem to have any way to disable ssl validation at all. Adding --disable-ssl-validation simply returns Unrecognized command or argument '--disable-ssl-validation'..

docker run \
	--rm \
	--user $(id -u):$(id -g) \
	-v ./kiota_generated:/app/output \
	-v ./openApi.json:/app/openapi.json \
	-e KIOTA_TUTORIAL_ENABLED=false \
	-e KIOTA_CLI_TELEMETRY_OPTOUT=true \
	mcr.microsoft.com/openapi/kiota@sha256:f15b000208a96f18fdc913744fb1a8c8c65926be34e9d33d56fc9e7318c4f2f8 \
	info --openapi /app/openapi.json --language typescript

What I was hoping was to be able to run all the necessary commands locally without any need for direct internet access. Either just downloading a Kiota container image with everything I need or caching whatever it needs and mounting it as a volume or something similar.

I'm also wondering how I'm supposed to use info correctly when it keeps throwing SSL exceptions.