Skip to content

Fix auth to Jira Data Center - #1588

Open
nvuillam wants to merge 5 commits into
mainfrom
fixes/jira_data_center
Open

Fix auth to Jira Data Center#1588
nvuillam wants to merge 5 commits into
mainfrom
fixes/jira_data_center

Conversation

@nvuillam

@nvuillam nvuillam commented Dec 11, 2025

Copy link
Copy Markdown
Member
  • Auth to jira data center
  • Instructions to test a development version of sfdx-hardis from a CI/CD pipeline

@nvuillam
Adds Jira Data Center authentication workaround
57c8651 
Implements a workaround for authenticating with JIRA_PAT on Jira Data Center servers.

The standard authentication flow fails because of the way Jira Data Center handles PAT authentication.
This change intercepts the request and manually injects the JIRA_PAT as a Bearer token in the Authorization header.
@nvuillam
More logs when unable to compute git summary
6196f5e
@github-actions

github-actions Bot commented Dec 11, 2025 •
edited
Loading

Copy link
Copy Markdown

❌MegaLinter analysis: Error

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 8 0 0 1.32s
✅ BASH shfmt 3 0 0 0 0.02s
✅ COPYPASTE jscpd yes no no 11.4s
✅ DOCKERFILE hadolint 1 0 0 0.1s
✅ JSON v8r 27 0 0 13.18s
✅ MARKDOWN markdown-table-formatter 341 0 0 0 0.67s
✅ REPOSITORY checkov yes no no 21.7s
⚠️ REPOSITORY gitleaks yes 5 no 134.63s
⚠️ REPOSITORY grype yes 1 no 28.36s
✅ REPOSITORY trivy yes no no 5.52s
✅ REPOSITORY trufflehog yes no no 3.18s
❌ SPELL cspell 671 2 0 18.43s
⚠️ SPELL lychee 385 88 0 12.8s
✅ TYPESCRIPT eslint 271 0 0 0 8.27s
⚠️ YAML v8r 15 1 0 9.07s

Detailed Issues

❌ SPELL / cspell - 2 errors 
docs/contributing.md:19:12     - Unknown word (mktemp)     -- TEMP_DIR=$(mktemp -d)
	 Suggestions: [mkdtemp, kemp, temp, Kemp, meetup]
README.md:391:12    - Unknown word (mktemp)     -- TEMP_DIR=$(mktemp -d)
	 Suggestions: [mkdtemp, kemp, temp, Kemp, meetup]
CSpell: Files checked: 649, Issues found: 2 in 2 files.


You can skip this misspellings by defining the following .cspell.json file at the root of your repository
Of course, please correct real typos before :)

{
    "version": "0.2",
    "language": "en",
    "ignorePaths": [
        "**/node_modules/**",
        "**/vscode-extension/**",
        "**/.git/**",
        "**/.pnpm-lock.json",
        ".vscode",
        "package-lock.json",
        "megalinter-reports"
    ],
    "words": [
        "mktemp"
    ]
}


You can also copy-paste megalinter-reports/.cspell.json at the root of your repository

🤖 AI-Powered Fix Suggestions for SPELL_CSPELL (by openai gpt-4.1-mini)

  1. Summary:
    The linter (cspell) flagged the word "mktemp" as unknown in two markdown files (docs/contributing.md and README.md). This means "mktemp" is not in the spell checker's dictionary.

  2. Why:
    "mktemp" is a valid Unix command but not a standard English word, so the spell checker treats it as a typo.

  3. How to fix:

  • Add "mktemp" to your cspell dictionary (e.g., in .cspell.json) under "words" to whitelist it.
  • Alternatively, add a comment or directive in the markdown files to ignore this word.
  • Avoid changing the word itself, as it is correct.

Example .cspell.json addition:

{
  "words": ["mktemp"]
}

This will prevent future false positives for "mktemp" without affecting code or documentation accuracy.

⚠️ REPOSITORY / gitleaks - 5 errors 
○
    │╲
    │ ○
    ○ ░
    ░    gitleaks

Finding:     ...BASIC_AUTH_PASSWORD=REDACTED
Secret:      REDACTED
RuleID:      grafana-cloud-api-token
Entropy:     5.345851
File:        salesforce-ci-cd-setup-integration-api/index.html
Line:        12096
Commit:      HIDDEN_BY_MEGALINTERAuthor:      
Email:       
Date:        2025-12-21T01:11:10Z
Fingerprint: 9d97e49dc0e5a8d450663affb5e767a48b6fa2f3:salesforce-ci-cd-setup-integration-api/index.html:grafana-cloud-api-token:12096
Link:        https://github.com/hardisgroupcom/sfdx-hardis/blob/9d97e49dc0e5a8d450663affb5e767a48b6fa2f3/salesforce-ci-cd-setup-integration-api/index.html#L12096

Finding:     ...BASIC_AUTH_PASSWORD=REDACTED
Secret:      REDACTED
RuleID:      grafana-cloud-api-token
Entropy:     5.345851
File:        salesforce-ci-cd-setup-integration-api/index.html
Line:        12097
Commit:      HIDDEN_BY_MEGALINTERAuthor:      
Email:       
Date:        2025-12-21T01:11:10Z
Fingerprint: 9d97e49dc0e5a8d450663affb5e767a48b6fa2f3:salesforce-ci-cd-setup-integration-api/index.html:grafana-cloud-api-token:12097
Link:        https://github.com/hardisgroupcom/sfdx-hardis/blob/9d97e49dc0e5a8d450663affb5e767a48b6fa2f3/salesforce-ci-cd-setup-integration-api/index.html#L12097

Finding:     ...BASIC_AUTH_PASSWORD=REDACTED\nNOTIF_API_METRICS_BA...
Secret:      REDACTED
RuleID:      grafana-cloud-api-token
Entropy:     5.345851
File:        search/search_index.json
Line:        1
Commit:      HIDDEN_BY_MEGALINTERAuthor:      
Email:       
Date:        2025-12-21T01:11:10Z
Fingerprint: 9d97e49dc0e5a8d450663affb5e767a48b6fa2f3:search/search_index.json:grafana-cloud-api-token:1
Link:        https://github.com/hardisgroupcom/sfdx-hardis/blob/9d97e49dc0e5a8d450663affb5e767a48b6fa2f3/search/search_index.json#L1

Finding:     ...BASIC_AUTH_PASSWORD=REDACTED\nNOTIF_API_METRICS_BA...
Secret:      REDACTED
RuleID:      grafana-cloud-api-token
Entropy:     5.345851
File:        search/search_index.json
Line:        1
Commit:      HIDDEN_BY_MEGALINTERAuthor:      
Email:       
Date:        2025-12-21T01:11:10Z
Fingerprint: 9d97e49dc0e5a8d450663affb5e767a48b6fa2f3:search/search_index.json:grafana-cloud-api-token:1
Link:        https://github.com/hardisgroupcom/sfdx-hardis/blob/9d97e49dc0e5a8d450663affb5e767a48b6fa2f3/search/search_index.json#L1

Finding:     const AMPLITUDE_TOKEN = 'REDACTED'
Secret:      REDACTED
RuleID:      generic-api-key
Entropy:     3.715018
File:        src/common/analytics.ts
Line:        7
Commit:      HIDDEN_BY_MEGALINTERAuthor:      NicolasVuillamy
Email:       nicolas.vuillamy@gmail.com
Date:        2021-01-31T00:23:50Z
Fingerprint: ca439c204d52687b82fb54e56ed9644d245c79c5:src/common/analytics.ts:generic-api-key:7
Link:        https://github.com/hardisgroupcom/sfdx-hardis/blob/ca439c204d52687b82fb54e56ed9644d245c79c5/src/common/analytics.ts#L7

5:37PM INF 2308 commits scanned.
5:37PM INF scanned ~99664154 bytes (99.66 MB) in 2m14s
5:37PM WRN leaks found: 5
⚠️ REPOSITORY / grype - 1 error 
[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) from=syft
NAME  INSTALLED  FIXED IN  TYPE  VULNERABILITY        SEVERITY  EPSS           RISK   
glob  10.4.5     10.5.0    npm   GHSA-5j98-mcp5-4vw2  High      < 0.1% (13th)  < 0.1
[0028] ERROR discovered vulnerabilities at or above the severity threshold
⚠️ SPELL / lychee - 88 errors 
[ERROR] file:///github/.github/copilot-instructions.md | Cannot find file
[404] https://trivy.dev/latest/ | Network error: Not Found
[ERROR] https://tickets.mycompany.com/ticket/%7BticketId%7D | Network error: error sending request for url (https://tickets.mycompany.com/ticket/%7BticketId%7D) Maybe a certificate error?
[404] https://img.youtube.com/vi/sfdx-hardis/0.jpg | Network error: Not Found
[403] https://medium.com/@dimitrimonge/freeze-unfreeze-users-during-salesforce-deployment-8a1488bf8dd3 | Network error: Forbidden
[403] https://npmjs.org/package/sfdx-hardis | Network error: Forbidden
[403] https://nicolas.vuillamy.fr/assisted-solving-of-salesforce-deployments-errors-47f3666a9ed0 | Network error: Forbidden
[403] https://nicolas.vuillamy.fr/how-to-mass-download-notes-and-attachments-files-from-a-salesforce-org-83a028824afd | Network error: Forbidden
[403] https://nicolas.vuillamy.fr/reactivate-all-the-sandbox-users-with-invalid-emails-in-3-clicks-2265af4e3a3d | Network error: Forbidden
[403] https://nicolas.vuillamy.fr/what-devops-experts-want-to-know-about-salesforce-ci-cd-with-sfdx-hardis-q-a-1f412db34476 | Network error: Forbidden
[403] https://nicolas.vuillamy.fr/invalid-scope-mine-not-allowed-deploy-your-listviews-anyway-443aceca8ac7 | Network error: Forbidden
[404] https://sfdx-hardis.cloudity.com/salesforce-ci-cd-setup-integrations-bitbucket/ | Network error: Not Found
[403] https://nicolas.vuillamy.fr/how-to-deploy-conga-composer-configuration-using-salesforce-cli-plugins-c2899641f36b | Network error: Forbidden
[404] https://www.schemastore.org/json/ | Network error: Not Found
[404] https://sfdx-hardis.cloudity.com/hardis/datacloud/sql-query/ | Network error: Not Found
[404] https://sfdx-hardis.cloudity.com/deployTips/ | Network error: Not Found
[404] https://sfdx-hardis.cloudity.com/hardis/doc/project/deploy/smart/ | Network error: Not Found
[404] https://sfdx-hardis.cloudity.com/hardis/org/configure/auth/ | Network error: Not Found
[404] https://sfdx-hardis.cloudity.com/hardis/datacloud/extract/agentforce-feedback/ | Network error: Not Found
[ERROR] file://assets/images/cloudity-map.jpg | Cannot find file
[ERROR] file://assets/images/cloudity-logo.jpg | Cannot find file
[403] https://nicolas.vuillamy.fr/what-devops-experts-want-to-know-about-salesforce-ci-cd-with-sfdx-hardis-q-a-1f412db34476 | Error (cached)
[404] https://img.youtube.com/vi/sfdx-hardis/0.jpg | Error (cached)
[403] https://nicolas.vuillamy.fr/assisted-solving-of-salesforce-deployments-errors-47f3666a9ed0 | Error (cached)
[403] https://nicolas.vuillamy.fr/how-to-deploy-conga-composer-configuration-using-salesforce-cli-plugins-c2899641f36b | Error (cached)
[404] https://myclient.force.com/ | Network error: Not Found
[403] https://medium.com/@nicolasvuillamy/how-to-deploy-conga-composer-configuration-using-salesforce-cli-plugins-c2899641f36b | Network error: Forbidden
[403] https://nicolas.vuillamy.fr/reactivate-all-the-sandbox-users-with-invalid-emails-in-3-clicks-2265af4e3a3d | Error (cached)
[403] https://medium.com/@dimitrimonge/freeze-unfreeze-users-during-salesforce-deployment-8a1488bf8dd3 | Error (cached)
[403] https://nicolas.vuillamy.fr/invalid-scope-mine-not-allowed-deploy-your-listviews-anyway-443aceca8ac7 | Error (cached)
[403] https://nicolas.vuillamy.fr/how-to-mass-download-notes-and-attachments-files-from-a-salesforce-org-83a028824afd | Error (cached)
[403] https://help.sfdmu.com/full-documentation/advanced-features/delete-from-source | Network error: Forbidden
[403] https://nicolas.vuillamy.fr/how-to-detect-bad-words-in-salesforce-records-using-sfdx-data-loader-and-sfdx-hardis-171db40a9bac | Network error: Forbidden
[403] https://www.npmjs.com/package/inquirer | Network error: Forbidden
[403] https://nicolas.vuillamy.fr/assisted-solving-of-salesforce-deployments-errors-47f3666a9ed0 | Error (cached)
[403] https://nicolas.vuillamy.fr/assisted-solving-of-salesforce-deployments-errors-47f3666a9ed0 | Error (cached)
[403] https://nicolas.vuillamy.fr/assisted-solving-of-salesforce-deployments-errors-47f3666a9ed0 | Error (cached)
[ERROR] file://docs/hardis/doc/$%7BCONSTANTS.DOC_URL_ROOT%7D/salesforce-project-documentation | Cannot find file
[403] https://nicolas.vuillamy.fr/assisted-solving-of-salesforce-deployments-errors-47f3666a9ed0 | Error (cached)
[403] https://nicolas.vuillamy.fr/how-to-mass-download-notes-and-attachments-files-from-a-salesforce-org-83a028824afd | Error (cached)
[403] https://www.npmjs.com/package/prompts | Network error: Forbidden
[403] https://nicolas.vuillamy.fr/how-to-detect-bad-words-in-salesforce-records-using-sfdx-data-loader-and-sfdx-hardis-171db40a9bac | Error (cached)
[403] https://nicolas.vuillamy.fr/how-to-detect-bad-words-in-salesforce-records-using-sfdx-data-loader-and-sfdx-hardis-171db40a9bac | Error (cached)
[403] https://nicolas.vuillamy.fr/how-to-detect-bad-words-in-salesforce-records-using-sfdx-data-loader-and-sfdx-hardis-171db40a9bac | Error (cached)
[403] https://nicolas.vuillamy.fr/handle-salesforce-api-versions-deprecation-like-a-pro-335065f52238 | Network error: Forbidden
[403] https://nicolas.vuillamy.fr/how-to-detect-bad-words-in-salesforce-records-using-sfdx-data-loader-and-sfdx-hardis-171db40a9bac | Network error: Forbidden
[403] https://nicolas.vuillamy.fr/how-to-mass-download-notes-and-attachments-files-from-a-salesforce-org-83a028824afd | Error (cached)
[ERROR] https://your-instance.service-now.com/ | Network error: error sending request for url (https://your-instance.service-now.com/) Maybe a certificate error?
[403] https://nicolas.vuillamy.fr/how-to-mass-download-notes-and-attachments-files-from-a-salesforce-org-83a028824afd | Error (cached)
[403] https://nicolas.vuillamy.fr/invalid-scope-mine-not-allowed-deploy-your-listviews-anyway-443aceca8ac7 | Error (cached)
[403] https://nicolas.vuillamy.fr/handle-salesforce-api-versions-deprecation-like-a-pro-335065f52238 | Network error: Forbidden
[403] https://nicolas.vuillamy.fr/reactivate-all-the-sandbox-users-with-invalid-emails-in-3-clicks-2265af4e3a3d | Error (cached)
[403] https://nicolas.vuillamy.fr/handle-salesforce-api-versions-deprecation-like-a-pro-335065f52238 | Network error: Forbidden
[403] https://nicolas.vuillamy.fr/assisted-solving-of-salesforce-deployments-errors-47f3666a9ed0 | Error (cached)
[404] https://sfdx-hardis.cloudity.com/salesforce-sandbox-refresh/ | Network error: Not Found
[404] https://sfdx-hardis.cloudity.com/salesforce-sandbox-refresh/ | Network error: Not Found
[404] https://sfdx-hardis.cloudity.com/deployTips/ | Error (cached)
[403] https://nicolas.vuillamy.fr/handle-salesforce-api-versions-deprecation-like-a-pro-335065f52238 | Network error: Forbidden
[404] https://sfdx-hardis.cloudity.com/deployTips/ | Error (cached)
[403] https://nicolas.vuillamy.fr/assisted-solving-of-salesforce-deployments-errors-47f3666a9ed0 | Error (cached)
[403] https://nicolas.vuillamy.fr/assisted-solving-of-salesforce-deployments-errors-47f3666a9ed0 | Error (cached)
[403] https://nicolas.vuillamy.fr/assisted-solving-of-salesforce-deployments-errors-47f3666a9ed0 | Error (cached)
[403] https://nicolas.vuillamy.fr/assisted-solving-of-salesforce-deployments-errors-47f3666a9ed0 | Error (cached)
[ERROR] file://docs/hardis/work/$%7BCONSTANTS.DOC_URL_ROOT%7D/hardis/project/clean/references | Cannot find file
[ERROR] file://docs/hardis/work/$%7BCONSTANTS.DOC_URL_ROOT%7D/salesforce-ci-cd-publish-task | Cannot find file
[403] https://nicolas.vuillamy.fr/invalid-scope-mine-not-allowed-deploy-your-listviews-anyway-443aceca8ac7 | Error (cached)
[403] https://npmjs.org/package/sfdx-hardis | Error (cached)
[403] https://nicolas.vuillamy.fr/how-to-detect-bad-words-in-salesforce-records-using-sfdx-data-loader-and-sfdx-hardis-171db40a9bac | Error (cached)
[403] https://nicolas.vuillamy.fr/how-to-mass-download-notes-and-attachments-files-from-a-salesforce-org-83a028824afd | Error (cached)
[403] https://medium.com/@dimitrimonge/freeze-unfreeze-users-during-salesforce-deplo

(Truncated to 8000 characters out of 22059)
⚠️ YAML / v8r - 1 error 
ℹ No config file found
ℹ Pre-warming the cache
ℹ Processing .github/dependabot.yml
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating .github/dependabot.yml against schema from https://www.schemastore.org/dependabot-2.0.json ...
✔ .github/dependabot.yml is valid

ℹ Processing .github/linters/.checkov.yml
✖ Could not find a schema to validate .github/linters/.checkov.yml

ℹ Processing .github/workflows/build-deploy-docs.yml
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating .github/workflows/build-deploy-docs.yml against schema from https://www.schemastore.org/github-workflow.json ...
✔ .github/workflows/build-deploy-docs.yml is valid

ℹ Processing .github/workflows/deploy.yml
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating .github/workflows/deploy.yml against schema from https://www.schemastore.org/github-workflow.json ...
✔ .github/workflows/deploy.yml is valid

ℹ Processing .github/workflows/devScripts.yml
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating .github/workflows/devScripts.yml against schema from https://www.schemastore.org/github-workflow.json ...
✔ .github/workflows/devScripts.yml is valid

ℹ Processing .github/workflows/docker-security-scan.yml
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating .github/workflows/docker-security-scan.yml against schema from https://www.schemastore.org/github-workflow.json ...
✔ .github/workflows/docker-security-scan.yml is valid

ℹ Processing .github/workflows/mega-linter.yml
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating .github/workflows/mega-linter.yml against schema from https://www.schemastore.org/github-workflow.json ...
✔ .github/workflows/mega-linter.yml is valid

ℹ Processing .github/workflows/retrieve-dashboards.yml
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating .github/workflows/retrieve-dashboards.yml against schema from https://www.schemastore.org/github-workflow.json ...
✔ .github/workflows/retrieve-dashboards.yml is valid

ℹ Processing .github/workflows/stale.yml
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating .github/workflows/stale.yml against schema from https://www.schemastore.org/github-workflow.json ...
✔ .github/workflows/stale.yml is valid

ℹ Processing .github/workflows/test.yml
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating .github/workflows/test.yml against schema from https://www.schemastore.org/github-workflow.json ...
✔ .github/workflows/test.yml is valid

ℹ Processing .mega-linter.yml
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating .mega-linter.yml against schema from https://raw.githubusercontent.com/megalinter/megalinter/main/megalinter/descriptors/schemas/megalinter-configuration.jsonschema.json ...
✖ .mega-linter.yml is invalid

.mega-linter.yml#/LLM_ADVISOR_LEVEL must be equal to one of the allowed values
.mega-linter.yml#/LLM_MAX_TOKENS must be string
.mega-linter.yml#/LLM_TEMPERATURE must be string

ℹ Processing config/code-analyzer.yml
✖ Could not find a schema to validate config/code-analyzer.yml

ℹ Processing config/sfdx-hardis.mega-linter-config.yml
✖ Could not find a schema to validate config/sfdx-hardis.mega-linter-config.yml

ℹ Processing mkdocs.yml
ℹ Found multiple possible matches for mkdocs.yml. Possible matches:

  mkdocs.yml (1.0)
  MkDocs configuration file
  https://www.schemastore.org/mkdocs-1.0.json

  mkdocs.yml (1.6)
  MkDocs configuration file
  https://www.schemastore.org/mkdocs-1.6.json

✖ Found multiple possible schemas to validate mkdocs.yml

ℹ Processing test/.sfdx-hardis.yml
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating test/.sfdx-hardis.yml against schema from https://raw.githubusercontent.com/hardisgroupcom/sfdx-hardis/main/config/sfdx-hardis.jsonschema.json ...
✖ reference "http://github.com/hardisgroupcom/sfdx-hardis.json#/properties/commandsPostDeploy/items/properties/customUsername" resolves to more than one schema

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@beta --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,BASH_SHFMT,COPYPASTE_JSCPD,DOCKERFILE_HADOLINT,JSON_V8R,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_TRIVY,REPOSITORY_TRUFFLEHOG,SPELL_CSPELL,SPELL_LYCHEE,TYPESCRIPT_ES,YAML_V8R

MegaLinter is graciously provided by OX Security

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@nvuillam