Skip to content

Backport: Support Sonatype Guide tokens for OSS Index analyzer#5996

Merged
nscuro merged 1 commit intoDependencyTrack:4.14.xfrom
nscuro:backport-pr-5994
Apr 2, 2026
Merged

Backport: Support Sonatype Guide tokens for OSS Index analyzer#5996
nscuro merged 1 commit intoDependencyTrack:4.14.xfrom
nscuro:backport-pr-5994

Conversation

@nscuro
Copy link
Copy Markdown
Member

@nscuro nscuro commented Apr 2, 2026

Description

Sonatype Guide uses bearer tokens, whereas OSS Index expects basic auth using email and token.

Note that the OSS Index API does not yet support Guide tokens, but will soon. This change ensures a smooth transition when the time comes.

Addressed Issue

Backports #5994

Additional Details

N/A

Checklist

  • I have read and understand the contributing guidelines
  • This PR fixes a defect, and I have provided tests to verify that the fix is effective
  • This PR implements an enhancement, and I have provided tests to verify that it works as intended
  • This PR introduces changes to the database model, and I have added corresponding update logic
  • This PR introduces new or alters existing behavior, and I have updated the documentation accordingly

Sonatype Guide uses bearer tokens, whereas OSS Index expects basic auth using email and token.

Note that the OSS Index API does not yet support Guide tokens, but will soon. This change ensures a smooth transition when the time comes.

Signed-off-by: nscuro <[email protected]>
@nscuro nscuro added this to the 4.14.1 milestone Apr 2, 2026
@nscuro nscuro added enhancement New feature or request integration/ossindex Related to the Sonatype OSS Index integration labels Apr 2, 2026
@owasp-dt-bot
Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@codacy-production
Copy link
Copy Markdown

codacy-production bot commented Apr 2, 2026

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 5 complexity · 4 duplication

Metric Results
Complexity 5
Duplication 4

View in Codacy

🟢 Coverage 100.00% diff coverage · +0.00% coverage variation

Metric Results
Coverage variation +0.00% coverage variation (-1.00%)
Diff coverage 100.00% diff coverage (70.00%)

View coverage diff in Codacy

Coverage variation details
Coverable lines Covered lines Coverage
Common ancestor commit (59784ef) 24774 20111 81.18%
Head commit (106abe4) 24779 (+5) 20116 (+5) 81.18% (+0.00%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details
Coverable lines Covered lines Diff coverage
Pull request (#5996) 15 15 100.00%

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

TIP This summary will be updated as you push new changes. Give us feedback

@nscuro nscuro merged commit 6ed2ddd into DependencyTrack:4.14.x Apr 2, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request integration/ossindex Related to the Sonatype OSS Index integration

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants