Skip to content

AST-188579 - Resolved single tenant base URL derivation logic - #291

Closed
cx-anand-nandeshwar wants to merge 5 commits into
mainfrom
bug/AST-188579_st_mcp
Closed

cx-anand-nandeshwar wants to merge 5 commits into
mainfrom
bug/AST-188579_st_mcp

Conversation

@cx-anand-nandeshwar

Copy link
Copy Markdown
Contributor

Description

Resolved single tenant base URL derivation logic.
Extracting issuer from the API Key and building tenant base URL

References

https://checkmarx.atlassian.net/browse/AST-188579

Testing

Test MCP configuration for Single Tenant

Checklist

  • I have added documentation for new/changed functionality in this PR (if applicable).
  • All active GitHub checks for tests, formatting, and security are passing
  • The correct base branch is being used

@cx-anand-nandeshwar
cx-anand-nandeshwar requested a review from a team October 27, 2026 06:09
cx-rakesh-kadu
cx-rakesh-kadu previously approved these changes Oct 27, 2026
host.replace(iam, ast) rewrote every iam substring in the issuer
host (e.g. iam.siamtech.com -> ast.sasttech.com). Swap only a leading
or dot-delimited iam. label; other hosts (single-tenant) are used as-is.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
cx-anand-nandeshwar and others added 2 commits October 28, 2026 02:10
Fixes high-severity vulnerabilities (incl. CVE-2026-89425) in
jackson-core 2.21.4 flagged by Checkmarx One SCA.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The cx-public-ubuntu-24.04-x64 runner image (1.15.0) now ships Maven 4,
which Tycho 4.x cannot run on ("No implementation for
MavenTargetLocationFactory was bound"), so every CI job failed before
tests started. Add a checksum-pinned Maven Wrapper and use ./mvnw in
CI and release workflows.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@stepsecurity-app

Copy link
Copy Markdown
Contributor

Security Policy Alert: Secret Policy Violation

This workflow run has been blocked by StepSecurity's secrets policy because it accesses secrets and the workflow file differs from the default branch.

Secret references detected:

  • secrets.CX_BASE_URI at line 37
  • secrets.CX_TENANT at line 38
  • secrets.CX_APIKEY at line 39
  • secrets.CX_TEST_SCAN at line 40

To approve this workflow, please add the workflows-approved label to this PR.

Note: The label must be added by someone other than the PR author (cx-anand-nandeshwar) or automation bots to ensure proper security review.

After the label is added, you can re-run the blocked workflow to proceed.

This workflow will be automatically approved once merged into the default branch.

For more information, see StepSecurity's Secret Exfiltration Policy documentation.

- Severity tests: the enum now holds only the 6 real severity levels;
  grouping options moved to GroupingMode.
- FilterState/ToolBarActions group-by tests: restore the
  FilterState.setGroupingMode(...) call that the refactor dropped, so
  the toggle under test actually happens.
- PreferencesTest store tests: Preferences.store writes to the shared
  ScopedPreferenceStore, not Activator's store; assert by reading the
  value back. Storing null throws, as Eclipse preferences reject nulls.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants