atlassian-labs / connect-vulnerability-scanner Goto Github PK

The AppPropertyScanner expects the following parameters for creation:

def __init__(
        self, session: requests.Session, base_url, app_key, user=None, api_token=None
    ):

in the scan.py file it is instantiated with the following mismatching list of parameters:

scanner = AppPropertyScanner(
            api_token, descriptor["key"], instance_url, submissions
        )

After fixing this using the user / ApiToken authentication will result in a 404 for me always. Even though the URL is build correctly. It this expected?

{
    "status-code": 404,
    "message": "App with key does not exist."
}