adding apikey to sast gpt command + fixing codebashing link

[tiagobcx]

By submitting a PR to this repository, you agree to the terms within the Checkmarx Code of Conduct. Please see the contributing guidelines for how to create and submit a high-quality PR for this repo.

Description

Describe the purpose of this PR along with any background information and the impacts of the proposed change.

References

Include supporting link to GitHub Issue/PR number

Testing

Describe how this change was tested. Be specific about anything not tested and reasons why. If this solution has unit and/or integration testing, tests should be added for new functionality and existing tests should complete without errors.

Please include any manual steps for testing end-to-end or functionality not covered by unit/integration tests.

Checklist

• I have added documentation for new/changed functionality in this PR (if applicable).
• All active GitHub checks for tests, formatting, and security are passing
• The correct base branch is being used

[github-actions]

Checkmarx One – Scan Summary & Details – 1feaa2b0-a248-4fb6-b797-c004368cceab

Policy Management Violations

Policy Name	Rule(s)	Break Build
[SAST-ML0] Not allowed NEW Sast vulnerabilities		true

New Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	Client_DOM_XSS	/media/view.js: 236	Attack Vector
	Client_DOM_XSS	/media/view.js: 236	Attack Vector
	Client_DOM_XSS	/media/view.js: 236	Attack Vector
	Cxab55612e-3a56	Npm-braces-3.0.2	Vulnerable Package
	Cxca84a1c2-1f12	Npm-micromatch-4.0.5	Vulnerable Package
	Client_Privacy_Violation	/media/view.js: 474	Attack Vector
	Client_Privacy_Violation	/media/view.js: 474	Attack Vector
	Missing_HSTS_Header	/src/resources/testProj/insecure.php: 24	Attack Vector
	Unpinned Actions Full Length Commit SHA	/dependabot-auto-merge.yml: 23	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/dependabot-auto-merge.yml: 14	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/checkmarx-one-scan.yml: 12	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/release.yml: 136	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/release.yml: 158	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/pr-label.yml: 15	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/delete-dev-releases.yml: 28	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...

Fixed Issues

Severity	Issue	Source File / Package
	CVE-2021-3807	Npm-ansi-regex-2.1.1
	Client_DOM_XSS	/media/gpt.js: 122
	Client_DOM_XSS	/media/gpt.js: 122
	Client_DOM_XSS	/media/gpt.js: 122
	Client_DOM_XSS	/media/view.js: 247
	Client_DOM_XSS	/media/view.js: 247
	Client_DOM_XSS	/media/view.js: 247
	CVE-2018-14040	Npm-bootstrap-4.0.0
	CVE-2018-14041	Npm-bootstrap-4.0.0
	CVE-2018-14042	Npm-bootstrap-4.0.0
	CVE-2019-8331	Npm-bootstrap-4.0.0
	CVE-2023-0842	Npm-xml2js-0.4.23
	Cxda14f253-4e52	Npm-bluebird-3.4.7