@datadog/datadog-ci-plugin-sarif 5.13.0 → 5.14.0

package/dist/bundle.js

@@ -5909,7 +5909,7 @@ var require_src$9 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 var require_package$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = {
 		"name": "@datadog/datadog-ci-base",
-		"version": "5.13.0",
+		"version": "5.14.0",
 		"description": "Base package for Datadog CI",
 		"license": "Apache-2.0",
 		"keywords": ["datadog", "datadog-ci"],
@@ -5939,6 +5939,10 @@ var require_package$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 				"development": "./src/constants.ts",
 				"default": "./dist/constants.js"
 			},
+			"./helpers/request/*": {
+				"development": "./src/helpers/request/*.ts",
+				"default": "./dist/helpers/request/*.js"
+			},
 			"./helpers/*": {
 				"development": "./src/helpers/*.ts",
 				"default": "./dist/helpers/*.js"
@@ -7072,7 +7076,6 @@ var require_plugin = /* @__PURE__ */ __commonJSMin(((exports) => {
 		]);
 		console.log();
 		patchModulePaths(nodeModulesPath);
-		printPluginVersion(pluginPackage);
 	});
 	const handlePluginAutoInstall = (scope) => __awaiter(void 0, void 0, void 0, function* () {
 		if (!!process.env["DISABLE_PLUGIN_AUTO_INSTALL"]) {
@@ -43740,177 +43743,6 @@ var require_dist$3 = /* @__PURE__ */ __commonJSMin(((exports) => {
 	exports.ProxyAgent = ProxyAgent;
 }));
 //#endregion
-//#region ../../node_modules/ansi-escapes/index.js
-var require_ansi_escapes = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	const ansiEscapes = module.exports;
-	module.exports.default = ansiEscapes;
-	const ESC = "\x1B[";
-	const OSC = "\x1B]";
-	const BEL = "\x07";
-	const SEP = ";";
-	const isTerminalApp = process.env.TERM_PROGRAM === "Apple_Terminal";
-	ansiEscapes.cursorTo = (x, y) => {
-		if (typeof x !== "number") throw new TypeError("The `x` argument is required");
-		if (typeof y !== "number") return ESC + (x + 1) + "G";
-		return ESC + (y + 1) + ";" + (x + 1) + "H";
-	};
-	ansiEscapes.cursorMove = (x, y) => {
-		if (typeof x !== "number") throw new TypeError("The `x` argument is required");
-		let ret = "";
-		if (x < 0) ret += ESC + -x + "D";
-		else if (x > 0) ret += ESC + x + "C";
-		if (y < 0) ret += ESC + -y + "A";
-		else if (y > 0) ret += ESC + y + "B";
-		return ret;
-	};
-	ansiEscapes.cursorUp = (count = 1) => ESC + count + "A";
-	ansiEscapes.cursorDown = (count = 1) => ESC + count + "B";
-	ansiEscapes.cursorForward = (count = 1) => ESC + count + "C";
-	ansiEscapes.cursorBackward = (count = 1) => ESC + count + "D";
-	ansiEscapes.cursorLeft = ESC + "G";
-	ansiEscapes.cursorSavePosition = isTerminalApp ? "\x1B7" : ESC + "s";
-	ansiEscapes.cursorRestorePosition = isTerminalApp ? "\x1B8" : ESC + "u";
-	ansiEscapes.cursorGetPosition = ESC + "6n";
-	ansiEscapes.cursorNextLine = ESC + "E";
-	ansiEscapes.cursorPrevLine = ESC + "F";
-	ansiEscapes.cursorHide = ESC + "?25l";
-	ansiEscapes.cursorShow = ESC + "?25h";
-	ansiEscapes.eraseLines = (count) => {
-		let clear = "";
-		for (let i = 0; i < count; i++) clear += ansiEscapes.eraseLine + (i < count - 1 ? ansiEscapes.cursorUp() : "");
-		if (count) clear += ansiEscapes.cursorLeft;
-		return clear;
-	};
-	ansiEscapes.eraseEndLine = ESC + "K";
-	ansiEscapes.eraseStartLine = ESC + "1K";
-	ansiEscapes.eraseLine = ESC + "2K";
-	ansiEscapes.eraseDown = ESC + "J";
-	ansiEscapes.eraseUp = ESC + "1J";
-	ansiEscapes.eraseScreen = ESC + "2J";
-	ansiEscapes.scrollUp = ESC + "S";
-	ansiEscapes.scrollDown = ESC + "T";
-	ansiEscapes.clearScreen = "\x1Bc";
-	ansiEscapes.clearTerminal = process.platform === "win32" ? `${ansiEscapes.eraseScreen}${ESC}0f` : `${ansiEscapes.eraseScreen}${ESC}3J${ESC}H`;
-	ansiEscapes.beep = BEL;
-	ansiEscapes.link = (text, url) => {
-		return [
-			OSC,
-			"8",
-			SEP,
-			SEP,
-			url,
-			BEL,
-			text,
-			OSC,
-			"8",
-			SEP,
-			SEP,
-			BEL
-		].join("");
-	};
-	ansiEscapes.image = (buffer, options = {}) => {
-		let ret = `${OSC}1337;File=inline=1`;
-		if (options.width) ret += `;width=${options.width}`;
-		if (options.height) ret += `;height=${options.height}`;
-		if (options.preserveAspectRatio === false) ret += ";preserveAspectRatio=0";
-		return ret + ":" + buffer.toString("base64") + BEL;
-	};
-	ansiEscapes.iTerm = {
-		setCwd: (cwd = process.cwd()) => `${OSC}50;CurrentDir=${cwd}${BEL}`,
-		annotation: (message, options = {}) => {
-			let ret = `${OSC}1337;`;
-			const hasX = typeof options.x !== "undefined";
-			const hasY = typeof options.y !== "undefined";
-			if ((hasX || hasY) && !(hasX && hasY && typeof options.length !== "undefined")) throw new Error("`x`, `y` and `length` must be defined when `x` or `y` is defined");
-			message = message.replace(/\|/g, "");
-			ret += options.isHidden ? "AddHiddenAnnotation=" : "AddAnnotation=";
-			if (options.length > 0) ret += (hasX ? [
-				message,
-				options.length,
-				options.x,
-				options.y
-			] : [options.length, message]).join("|");
-			else ret += message;
-			return ret + BEL;
-		}
-	};
-}));
-//#endregion
-//#region ../../node_modules/supports-hyperlinks/index.js
-var require_supports_hyperlinks = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	const supportsColor = require_supports_color();
-	const hasFlag = require_has_flag();
-	function parseVersion(versionString) {
-		if (/^\d{3,4}$/.test(versionString)) {
-			const m = /(\d{1,2})(\d{2})/.exec(versionString);
-			return {
-				major: 0,
-				minor: parseInt(m[1], 10),
-				patch: parseInt(m[2], 10)
-			};
-		}
-		const versions = (versionString || "").split(".").map((n) => parseInt(n, 10));
-		return {
-			major: versions[0],
-			minor: versions[1],
-			patch: versions[2]
-		};
-	}
-	function supportsHyperlink(stream) {
-		const { env } = process;
-		if ("FORCE_HYPERLINK" in env) return !(env.FORCE_HYPERLINK.length > 0 && parseInt(env.FORCE_HYPERLINK, 10) === 0);
-		if (hasFlag("no-hyperlink") || hasFlag("no-hyperlinks") || hasFlag("hyperlink=false") || hasFlag("hyperlink=never")) return false;
-		if (hasFlag("hyperlink=true") || hasFlag("hyperlink=always")) return true;
-		if ("NETLIFY" in env) return true;
-		if (!supportsColor.supportsColor(stream)) return false;
-		if (stream && !stream.isTTY) return false;
-		if (process.platform === "win32") return false;
-		if ("CI" in env) return false;
-		if ("TEAMCITY_VERSION" in env) return false;
-		if ("TERM_PROGRAM" in env) {
-			const version = parseVersion(env.TERM_PROGRAM_VERSION);
-			switch (env.TERM_PROGRAM) {
-				case "iTerm.app":
-					if (version.major === 3) return version.minor >= 1;
-					return version.major > 3;
-				case "WezTerm": return version.major >= 20200620;
-				case "vscode": return version.major > 1 || version.major === 1 && version.minor >= 72;
-			}
-		}
-		if ("VTE_VERSION" in env) {
-			if (env.VTE_VERSION === "0.50.0") return false;
-			const version = parseVersion(env.VTE_VERSION);
-			return version.major > 0 || version.minor >= 50;
-		}
-		return false;
-	}
-	module.exports = {
-		supportsHyperlink,
-		stdout: supportsHyperlink(process.stdout),
-		stderr: supportsHyperlink(process.stderr)
-	};
-}));
-//#endregion
-//#region ../../node_modules/terminal-link/index.js
-var require_terminal_link = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	const ansiEscapes = require_ansi_escapes();
-	const supportsHyperlinks = require_supports_hyperlinks();
-	const terminalLink = (text, url, { target = "stdout", ...options } = {}) => {
-		if (!supportsHyperlinks[target]) {
-			if (options.fallback === false) return text;
-			return typeof options.fallback === "function" ? options.fallback(text, url) : `${text} (\u200B${url}\u200B)`;
-		}
-		return ansiEscapes.link(text, url);
-	};
-	module.exports = (text, url, options = {}) => terminalLink(text, url, options);
-	module.exports.stderr = (text, url, options = {}) => terminalLink(text, url, {
-		target: "stderr",
-		...options
-	});
-	module.exports.isSupported = supportsHyperlinks.stdout;
-	module.exports.stderr.isSupported = supportsHyperlinks.stderr;
-}));
-//#endregion
 //#region ../../node_modules/undici/lib/core/symbols.js
 var require_symbols = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = {
@@ -65481,10 +65313,10 @@ var require_request = /* @__PURE__ */ __commonJSMin(((exports) => {
 			throw requestError;
 		}
 		const responseHeaders = parseResponseHeaders(response.headers);
-		const contentType = (_h = responseHeaders["content-type"]) !== null && _h !== void 0 ? _h : "";
+		const mediaType = ((_h = responseHeaders["content-type"]) !== null && _h !== void 0 ? _h : "").split(";")[0].trim();
 		const rawBody = yield response.text();
 		let data = rawBody;
-		if (contentType.includes("application/json") && rawBody.length > 0) try {
+		if (rawBody.length > 0 && (mediaType === "application/json" || mediaType === "application/vnd.api+json")) try {
 			data = JSON.parse(rawBody);
 		} catch (_j) {}
 		if (!response.ok) throw new RequestError(`Request failed with status code ${response.status}`, config, {
@@ -65536,20 +65368,15 @@ var require_utils$1 = /* @__PURE__ */ __commonJSMin(((exports) => {
 		return mod && mod.__esModule ? mod : { "default": mod };
 	};
 	Object.defineProperty(exports, "__esModule", { value: true });
-	exports.isFile = exports.getGitHubEventPayload = exports.execute = exports.maskString = exports.formatBytes = exports.timedExecAsync = exports.filterAndFormatGithubRemote = exports.filterSensitiveInfoFromRepository = exports.performSubCommand = exports.pluralize = exports.normalizeRef = exports.recursivelyRemoveUndefinedValues = exports.removeUndefinedValues = exports.removeEmptyValues = exports.buildPath = exports.getApiHostForSite = exports.getProxyAgent = exports.getRequestBuilder = exports.getProxyUrl = exports.resolveConfigFromFile = exports.resolveConfigFromFileAndEnvironment = exports.getConfig = exports.pick = exports.makeTerminalLink = exports.DEFAULT_CONFIG_PATHS = void 0;
+	exports.isFile = exports.getGitHubEventPayload = exports.execute = exports.maskString = exports.formatBytes = exports.timedExecAsync = exports.filterAndFormatGithubRemote = exports.filterSensitiveInfoFromRepository = exports.performSubCommand = exports.pluralize = exports.normalizeRef = exports.recursivelyRemoveUndefinedValues = exports.removeUndefinedValues = exports.removeEmptyValues = exports.buildPath = exports.getApiHostForSite = exports.getProxyAgent = exports.getRequestBuilder = exports.getProxyUrl = exports.resolveConfigFromFile = exports.resolveConfigFromFileAndEnvironment = exports.getConfig = exports.pick = exports.DEFAULT_CONFIG_PATHS = void 0;
 	const child_process_1 = require("child_process");
 	const fs_1$3 = require("fs");
 	const util_1 = require("util");
 	const clipanion_1 = require_advanced();
 	const deep_extend_1 = __importDefault(require_deep_extend());
 	const proxy_agent_1 = require_dist$3();
-	const terminal_link_1 = __importDefault(require_terminal_link());
 	const request_1 = require_request();
 	exports.DEFAULT_CONFIG_PATHS = ["datadog-ci.json"];
-	const makeTerminalLink = (url) => {
-		return ((strings) => (0, terminal_link_1.default)(strings[0], url));
-	};
-	exports.makeTerminalLink = makeTerminalLink;
 	const pick = (base, keys) => {
 		const definedKeys = keys.filter((key) => !!base[key]);
 		const pickedObject = {};
@@ -65821,10 +65648,11 @@ var require_ci = /* @__PURE__ */ __commonJSMin(((exports) => {
 		return mod && mod.__esModule ? mod : { "default": mod };
 	};
 	Object.defineProperty(exports, "__esModule", { value: true });
-	exports.getGithubJobIDFromLogs = exports.getGithubStepInfoFromLogs = exports.enrichCIEnvFromGithubLogs = exports.getGithubJobNameFromLogs = exports.isGithubWindowsRunner = exports.shouldGetGithubJobID = exports.shouldGetGithubJobDisplayName = exports.isInteractive = exports.getCIProvider = exports.isCI = exports.getCIEnv = exports.getCIMetadata = exports.getCISpanTags = exports.githubWellKnownDiagnosticDirsWin = exports.githubWellKnownDiagnosticDirsUnix = exports.validateLevel = exports.LEVEL_TO_NUMBER = exports.VALID_LEVELS = exports.CI_LEVELS = exports.envDDGithubStepIndex = exports.envDDGithubJobName = exports.CI_ENGINES = void 0;
+	exports.getGithubJobIDFromLogs = exports.getGithubStepInfoFromLogs = exports.enrichCIEnvFromGithubLogs = exports.getGithubJobNameFromLogs = exports.isGithubWindowsRunner = exports.shouldGetGithubJobID = exports.shouldGetGithubJobDisplayName = exports.isInteractive = exports.getCIProvider = exports.isCI = exports.getCIEnv = exports.getCIMetadata = exports.getCISpanTags = exports.githubWellKnownDiagnosticDirPatternsWin = exports.githubWellKnownDiagnosticDirPatternsUnix = exports.githubWellKnownDiagnosticDirsWin = exports.githubWellKnownDiagnosticDirsUnix = exports.validateLevel = exports.LEVEL_TO_NUMBER = exports.VALID_LEVELS = exports.CI_LEVELS = exports.envDDGithubStepIndex = exports.envDDGithubJobName = exports.CI_ENGINES = void 0;
 	const fs_1$2 = __importDefault(require("fs"));
 	const chalk_1 = __importDefault(require_source());
 	const upath_1 = __importDefault(require_upath());
+	const glob_1 = require_glob();
 	const tags_1 = require_tags();
 	const user_provided_git_1 = require_user_provided_git();
 	const utils_1 = require_utils$1();
@@ -65878,12 +65706,10 @@ var require_ci = /* @__PURE__ */ __commonJSMin(((exports) => {
 		if (level === exports.CI_LEVELS.STEP && provider !== exports.CI_ENGINES.GITHUB) return `Level '${exports.CI_LEVELS.STEP}' is only supported for provider [${exports.CI_ENGINES.GITHUB}]`;
 	};
 	exports.validateLevel = validateLevel;
-	exports.githubWellKnownDiagnosticDirsUnix = [
-		"/home/runner/actions-runner/cached/_diag",
-		"/home/runner/actions-runner/_diag",
-		"/opt/actions-runner/_diag"
-	];
-	exports.githubWellKnownDiagnosticDirsWin = ["C:/actions-runner/cached/_diag", "C:/actions-runner/_diag"];
+	exports.githubWellKnownDiagnosticDirsUnix = ["/home/runner/actions-runner/_diag", "/opt/actions-runner/_diag"];
+	exports.githubWellKnownDiagnosticDirsWin = ["C:/actions-runner/_diag"];
+	exports.githubWellKnownDiagnosticDirPatternsUnix = ["/home/runner/actions-runner/*/_diag", "/home/runner/actions-runner/*/*/_diag"];
+	exports.githubWellKnownDiagnosticDirPatternsWin = ["C:/actions-runner/*/_diag", "C:/actions-runner/*/*/_diag"];
 	const githubJobDisplayNameRegex = /"jobDisplayName":\s*"((?:[^"\\]|\\.)*)"/;
 	const githubJodIDRegex = /"job":\s*{[\s\S]*?"v"\s*:\s*(\d+)(?:\.0)?/;
 	/**
@@ -65914,13 +65740,27 @@ var require_ci = /* @__PURE__ */ __commonJSMin(((exports) => {
 		const runnerTemp = process.env.RUNNER_TEMP;
 		if (runnerTemp) {
 			const runnerRoot = upath_1.default.resolve(runnerTemp, "..", "..");
-			dirs.push(upath_1.default.join(runnerRoot, "cached", "_diag"));
+			dirs.push(`${runnerRoot}/*/_diag`);
+			dirs.push(`${runnerRoot}/*/*/_diag`);
 			dirs.push(upath_1.default.join(runnerRoot, "_diag"));
-			dirs.push(upath_1.default.join(runnerRoot, "actions-runner", "cached", "_diag"));
+			dirs.push(`${runnerRoot}/actions-runner/*/_diag`);
+			dirs.push(`${runnerRoot}/actions-runner/*/*/_diag`);
 			dirs.push(upath_1.default.join(runnerRoot, "actions-runner", "_diag"));
 		}
 		return uniq(dirs.filter(Boolean));
 	};
+	/**
+	* Expands a mixed list of literal directories and glob patterns into concrete
+	* directories. Literals pass through unchanged (existence is checked later).
+	*/
+	const expandDiagnosticDirCandidates = (candidates) => {
+		const expanded = [];
+		for (const candidate of candidates) if ((0, glob_1.hasMagic)(candidate)) try {
+			expanded.push(...(0, glob_1.globSync)(candidate));
+		} catch (_a) {}
+		else expanded.push(candidate);
+		return uniq(expanded);
+	};
 	const parseEmailAndName = (emailAndName) => {
 		if (!emailAndName) return {
 			name: "",
@@ -66512,8 +66352,16 @@ var require_ci = /* @__PURE__ */ __commonJSMin(((exports) => {
 	const getGithubWorkerLogFiles = (context) => {
 		let foundDiagDir = "";
 		let workerLogFiles = [];
-		let wellKnownDirs = uniq([...getGithubDiagnosticDirsFromEnv(), ...exports.githubWellKnownDiagnosticDirsUnix]);
-		if ((0, exports.isGithubWindowsRunner)()) wellKnownDirs = uniq([...getGithubDiagnosticDirsFromEnv(), ...exports.githubWellKnownDiagnosticDirsWin]);
+		let wellKnownDirs = expandDiagnosticDirCandidates([
+			...getGithubDiagnosticDirsFromEnv(),
+			...exports.githubWellKnownDiagnosticDirPatternsUnix,
+			...exports.githubWellKnownDiagnosticDirsUnix
+		]);
+		if ((0, exports.isGithubWindowsRunner)()) wellKnownDirs = expandDiagnosticDirCandidates([
+			...getGithubDiagnosticDirsFromEnv(),
+			...exports.githubWellKnownDiagnosticDirPatternsWin,
+			...exports.githubWellKnownDiagnosticDirsWin
+		]);
 		for (const currentDir of wellKnownDirs) try {
 			const potentialLogs = fs_1$2.default.readdirSync(currentDir, { withFileTypes: true }).filter((file) => file.isFile() && file.name.startsWith("Worker_") && file.name.endsWith(".log")).map((file) => file.name);
 			if (potentialLogs.length > 0) {
@@ -66536,22 +66384,43 @@ var require_ci = /* @__PURE__ */ __commonJSMin(((exports) => {
 		return [foundDiagDir, workerLogFiles];
 	};
 	/**
-	* Narrows the list of Worker log files to check by using ACTIONS_ORCHESTRATION_ID
-	* to identify the correct log for the current job on non-ephemeral runners.
+	* Narrows the list of Worker log files to the one belonging to the current job.
+	*
+	* Worker log filenames contain a timestamp (Worker_YYYYMMDD-HHMMSS-utc.log), so
+	* alphabetical order equals chronological order. Logs are always returned
+	* newest-first so that the caller's iteration naturally encounters the current
+	* job's log before any earlier ones — correct on both ephemeral and non-ephemeral
+	* (multi) runners regardless of the strategy used.
+	*
+	* Primary strategy (runner >= v2.331.0, feature-flag gated):
+	*   ACTIONS_ORCHESTRATION_ID is set by the runner from the system.orchestrationId
+	*   variable in the job request message. That variable is serialized into the Worker
+	*   log as part of the job message JSON. planId is a GUID shared by all jobs in the
+	*   same workflow run, so the full orchestration ID is needed for a unique match:
+	*     Non-matrix job:          <planId>.<yaml-job-key>.__default
+	*     Single-dimension matrix: <planId>.<yaml-job-key>.<matrix-value>
+	*     Multi-dimension matrix:  <planId>.<yaml-job-key>.<val1>.<val2>[...]
+	*
+	* Fallback (runner < v2.331.0 or ACTIONS_ORCHESTRATION_ID absent/unmatched):
+	*   Return all logs newest-first. The caller iterates until it finds a jobDisplayName,
+	*   which on a single-job runner is immediate, and on a multi-runner is the current
+	*   job's (most recent) log.
 	*/
 	const getTargetWorkerLogFiles = (context, foundDiagDir, workerLogFiles) => {
+		const sortedNewestFirst = [...workerLogFiles].sort().reverse();
 		const orchestrationId = process.env.ACTIONS_ORCHESTRATION_ID;
-		if (!orchestrationId) return workerLogFiles;
-		const planId = orchestrationId.split(".")[0];
-		for (const logFile of workerLogFiles) {
-			const filePath = upath_1.default.join(foundDiagDir, logFile);
-			if (fs_1$2.default.readFileSync(filePath, "utf-8").includes(`"planId": "${planId}"`)) {
-				context.stdout.write(`Found Worker log for planId ${planId}: ${logFile}\n`);
-				return [logFile];
+		if (orchestrationId) {
+			for (const logFile of sortedNewestFirst) {
+				const filePath = upath_1.default.join(foundDiagDir, logFile);
+				const content = fs_1$2.default.readFileSync(filePath, "utf-8");
+				if (content.includes("\"system.orchestrationId\":") && content.includes(`"${orchestrationId}"`)) {
+					context.stdout.write(`Found Worker log via system.orchestrationId for ${orchestrationId}: ${logFile}\n`);
+					return [logFile];
+				}
 			}
+			context.stderr.write(`${chalk_1.default.yellow.bold("[WARNING]")} Could not find Worker log via system.orchestrationId for ${orchestrationId}, checking all logs\n`);
 		}
-		context.stderr.write(`${chalk_1.default.yellow.bold("[WARNING]")} Could not find Worker log for planId ${planId}, checking all logs\n`);
-		return workerLogFiles;
+		return sortedNewestFirst;
 	};
 	const getGithubJobAttributeFromLogFiles = (context, foundDiagDir, workerLogFiles, jobAttributeRegex) => {
 		const logsToCheck = getTargetWorkerLogFiles(context, foundDiagDir, workerLogFiles);
@@ -72438,6 +72307,66 @@ var require_tags = /* @__PURE__ */ __commonJSMin(((exports) => {
 	};
 }));
 //#endregion
+//#region ../base/dist/helpers/request/datadog-route.js
+var require_datadog_route = /* @__PURE__ */ __commonJSMin(((exports) => {
+	Object.defineProperty(exports, "__esModule", { value: true });
+	exports.datadogRoute = exports.DATADOG_ROUTE_PATHS = void 0;
+	/**
+	* List of all Datadog API routes used by datadog-ci.
+	*
+	* Only those routes are accepted by {@link datadogRoute}.
+	*/
+	exports.DATADOG_ROUTE_PATHS = [
+		"/api/intake/ci/custom_spans",
+		"/api/ui/support/serverless/flare",
+		"/api/unstable/deployments/gates/evaluation",
+		"/api/unstable/deployments/gates/evaluation/:evaluationId",
+		"/api/v1/validate",
+		"/api/v2/ci/deployments/correlate-image",
+		"/api/v2/ci/deployments/correlate",
+		"/api/v2/ci/pipeline/metrics",
+		"/api/v2/ci/pipeline/tags",
+		"/api/v2/cicodescan",
+		"/api/v2/cicovreprt",
+		"/api/v2/ciiac",
+		"/api/v2/cireport",
+		"/api/v2/dora/deployment",
+		"/api/v2/git/repository/packfile",
+		"/api/v2/git/repository/search_commits",
+		"/api/v2/quality-gates/evaluate",
+		"/api/v2/srcmap",
+		"/api/v2/static-analysis-sca/dependencies",
+		"/synthetics/ci/batch/:batchId",
+		"/synthetics/ci/tunnel",
+		"/synthetics/mobile/applications/:applicationId/multipart-presigned-urls",
+		"/synthetics/mobile/applications/:applicationId/multipart-upload-complete",
+		"/synthetics/mobile/applications/validation-job-status/:jobId",
+		"/synthetics/settings",
+		"/synthetics/tests/:testId",
+		"/synthetics/tests/:testId/version_history/:version?only_check_existence=true",
+		"/synthetics/tests/:testType/:testId",
+		"/synthetics/tests/poll_results",
+		"/synthetics/tests/search",
+		"/synthetics/tests/trigger/ci",
+		"/v1/input"
+	];
+	/**
+	* Format a Datadog API route with optional parameters.
+	*
+	* @example
+	* ```ts
+	* const route = datadogRoute('/api/v2/resources/:resourceId', {
+	*   resourceId: '123',
+	* })
+	* ```
+	*/
+	const datadogRoute = (route, ...[params]) => {
+		if (!params) return route;
+		return route.replace(/:([A-Za-z0-9_]+)/g, (_, key) => encodeURIComponent(String(params[key])));
+	};
+	exports.datadogRoute = datadogRoute;
+}));
+//#endregion
 //#region ../../node_modules/delayed-stream/lib/delayed_stream.js
 var require_delayed_stream = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var Stream$2 = require("stream").Stream;
@@ -81176,6 +81105,7 @@ var import_glob = require_glob();
 var import_retry = require_retry$1();
 var import_utils = require_utils$1();
 var import_tags = require_tags();
+var import_datadog_route = require_datadog_route();
 var import_form_data = /* @__PURE__ */ __toESM(require_form_data());
 var import_app = require_app();
 var import_source = /* @__PURE__ */ __toESM(require_source());
@@ -81263,7 +81193,7 @@ const uploadSarifReport = (request) => async (sarifReport, write) => {
 		data: form,
 		headers: form.getHeaders(),
 		method: "POST",
-		url: "api/v2/cicodescan"
+		url: (0, import_datadog_route.datadogRoute)("/api/v2/cicodescan")
 	});
 };
 const apiConstructor = (baseIntakeUrl, apiKey) => {

package/dist/bundle.js.LEGAL.txt

@@ -150,19 +150,6 @@ ajv-formats/LICENSE:
    * SOFTWARE.
    */
 
-ansi-escapes/license:
-  /*
-   * MIT License
-   * 
-   * Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
-   * 
-   * Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
-   * 
-   * The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
-   * 
-   * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-   */
-
 ansi-styles/license:
   /*
    * MIT License
@@ -1501,32 +1488,6 @@ supports-color/license:
    * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
    */
 
-supports-hyperlinks/license:
-  /*
-   * MIT License
-   * 
-   * Copyright (c) James Talmage <james@talmage.io> (github.com/jamestalmage)
-   * 
-   * Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
-   * 
-   * The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
-   * 
-   * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-   */
-
-terminal-link/license:
-  /*
-   * MIT License
-   * 
-   * Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
-   * 
-   * Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
-   * 
-   * The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
-   * 
-   * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-   */
-
 tiny-async-pool/package.json:
   /*
    * License: MIT